CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Study every current SY0-701 exam domain with original, concise flashcards for security concepts, threats, architecture, operations, and governance.
Apie šį rinkinį
Build reliable recall across all five current Security+ SY0-701 domains with 744 original, open-response cards. The deck follows the newest official objectives for the current exam series: Version 6.0, accessed on August 25, 2026.
What this deck covers
- General security concepts: control functions, core principles, zero trust, change management, cryptography, certificates, and PKI.
- Threats, vulnerabilities, and mitigations: threat actors, attack vectors, social engineering, platform and application weaknesses, malicious activity, indicators, and defensive choices.
- Security architecture: cloud and virtualization models, secure infrastructure, data protection, availability, backups, and recovery design.
- Security operations: hardening, asset and vulnerability management, monitoring, security tooling, identity and access, automation, incident response, and evidence sources.
- Program management and oversight: governance, risk, third-party security, compliance, privacy, audits, and awareness.
Prompts include concept-to-purpose recall, scenario-to-control or threat identification, and operational comparisons. Reverse prompts appear only when choosing a control, evidence source, or response is useful in practice. Prerequisites come before dependent ideas, while related variants are spaced apart.
The deck excludes multiple-choice practice, copied exam material, dumps, raw objective wording, vague term-only prompts, vendor trivia, and mechanically reversed duplicates. Use it after a course or primary study guide, then add hands-on labs and legitimate practice questions to test application.
Scope was reconciled against CompTIA Security+ SY0-701 Certification Exam: Exam Objectives Version 6.0. Current certification requirements and exam-series status are on the official CompTIA Security+ page.
This is an unofficial educational deck by Flashcards Open Source App. It is not affiliated with, endorsed by, or produced by CompTIA. All card wording and cover artwork are original; no exam questions, answer dumps, objective prose, logos, or trade dress were copied.
Šio rinkinio kortelės
1 kortelė
Klausimas
What does an information security policy establish?
Atsakymas
Management's required direction, responsibilities, and high-level rules for protecting information and systems.
2 kortelė
Klausimas
What is phishing?
Atsakymas
A deceptive message intended to make a target reveal information, open malware, or take an unsafe action.
3 kortelė
Klausimas
What does a public-key certificate bind to an identity?
Atsakymas
A public key, together with identifying information and the issuer's signature.
4 kortelė
Klausimas
What is data at rest?
Atsakymas
Data stored on media such as disks, databases, backups, or mobile devices.
5 kortelė
Klausimas
How does policy-driven access control decide a zero-trust access request?
Atsakymas
Explicit policies or rules evaluate the access request and drive the allow-or-deny decision.
6 kortelė
Klausimas
What does establishing a secure baseline produce?
Atsakymas
An approved, documented configuration that defines the required secure state for a class of computing resource.
7 kortelė
Klausimas
What is hashing used to verify?
Atsakymas
Whether data has changed by comparing fixed-length digest values.
8 kortelė
Klausimas
What is impersonation in social engineering?
Atsakymas
Pretending to be a trusted person or organization to obtain access, data, or action.
9 kortelė
Klausimas
What is virtualization?
Atsakymas
Abstracting physical compute so multiple isolated guest systems can share a host.
10 kortelė
Klausimas
What is chain of custody?
Atsakymas
A documented history of who collected, handled, transferred, stored, and examined evidence.
11 kortelė
Klausimas
What is quantitative risk analysis?
Atsakymas
Estimating risk with numerical values such as money, frequency, or probability.
12 kortelė
Klausimas
What is a phishing awareness campaign?
Atsakymas
A planned series of guidance, exercises, and reminders that builds recognition and safe reporting behavior.
13 kortelė
Klausimas
What is high availability?
Atsakymas
Designing a service to remain accessible despite expected component failures.
14 kortelė
Klausimas
What is a network security zone?
Atsakymas
A group of systems with similar trust, function, or control requirements.
15 kortelė
Klausimas
What is risk transfer?
Atsakymas
Shifting some financial or operational consequence to another party, such as through insurance or contract.
16 kortelė
Klausimas
What is media sanitization?
Atsakymas
Making stored data infeasible to recover for the intended level of protection.
17 kortelė
Klausimas
What does CVSS provide?
Atsakymas
A standardized way to describe a vulnerability's technical severity characteristics.
18 kortelė
Klausimas
What does security alerting do?
Atsakymas
It turns matched events or behavior into a notification that the right responder can review.
19 kortelė
Klausimas
What does a firewall rule enforce?
Atsakymas
A permit, deny, or inspect decision for traffic that matches defined source, destination, service, protocol, direction, and state conditions.
20 kortelė
Klausimas
What is deprovisioning?
Atsakymas
Disabling or removing accounts, credentials, sessions, and access when they are no longer needed.
21 kortelė
Klausimas
How does inline placement differ from a tap or monitor port?
Atsakymas
Inline traffic passes through the control; a tap or monitor receives a copy for observation.
22 kortelė
Klausimas
What is asymmetric encryption?
Atsakymas
Encryption that uses a mathematically related public and private key pair.
23 kortelė
Klausimas
What does SPF authorize?
Atsakymas
Which mail servers may send mail for a domain in the SMTP envelope.
24 kortelė
Klausimas
What is a possession factor?
Atsakymas
Something the claimant has, such as a cryptographic authenticator.
25 kortelė
Klausimas
What does ordinary TLS usually protect and authenticate?
Atsakymas
It provides encryption and integrity protection, plus server authentication in the usual deployment. Client authentication is added when mutual TLS is configured.
26 kortelė
Klausimas
What is single loss expectancy?
Atsakymas
The estimated loss from one occurrence of a risk event.
27 kortelė
Klausimas
What does a certificate authority do?
Atsakymas
It validates certificate requests and signs certificates so relying parties can verify the binding between an identity and a public key.
28 kortelė
Klausimas
What is a detective control meant to do?
Atsakymas
Identify that an unwanted event has happened or is happening.
29 kortelė
Klausimas
What is the security purpose of change-control approval?
Atsakymas
Ensure authorized reviewers assess risk before the production change occurs.
30 kortelė
Klausimas
What is shadow IT?
Atsakymas
Technology used for organizational work without required approval or oversight.
31 kortelė
Klausimas
What is a buffer overflow vulnerability?
Atsakymas
A bounds-checking failure that lets input overwrite memory outside its intended buffer.
32 kortelė
Klausimas
What is ransomware?
Atsakymas
Malware or an intrusion outcome that denies access to data or systems to extort the victim.
33 kortelė
Klausimas
How does network segmentation limit an incident?
Atsakymas
It restricts communication paths and reduces lateral movement between zones.
34 kortelė
Klausimas
How do load balancing and clustering support availability differently?
Atsakymas
Load balancing distributes requests across healthy instances; clustering makes systems cooperate as one service and tolerate member failure.
35 kortelė
Klausimas
What is vendor due diligence?
Atsakymas
Evaluating a provider's security, capability, stability, and fit before commitment.
36 kortelė
Klausimas
Who is a data subject?
Atsakymas
The person whose personal data is collected or processed.
37 kortelė
Klausimas
What is attestation?
Atsakymas
A formal assertion or report about a subject matter, often supported by an independent examination.
38 kortelė
Klausimas
What is a replay attack?
Atsakymas
Valid captured data is retransmitted to repeat an authenticated or authorized action.
39 kortelė
Klausimas
What does a wireless site survey establish?
Atsakymas
Coverage, interference, channel use, access-point placement, and unauthorized radio sources in the real environment.
40 kortelė
Klausimas
What is the time-of-check stage of a race-condition vulnerability?
Atsakymas
The application verifies a condition or resource state before acting on it.
41 kortelė
Klausimas
What is a penetration test?
Atsakymas
An authorized attempt to exploit weaknesses and demonstrate practical impact.
42 kortelė
Klausimas
What is a cold recovery site?
Atsakymas
A facility with basic space and utilities but little preinstalled technology or current data.
43 kortelė
Klausimas
What is data in transit?
Atsakymas
Data moving between systems or across a network.
44 kortelė
Klausimas
What is a vendor security questionnaire?
Atsakymas
A structured request for information about a provider's controls and practices.
45 kortelė
Klausimas
How does an internal actor's starting position differ from an external actor's?
Atsakymas
An internal actor begins with some trusted access or proximity; an external actor must first cross the perimeter or obtain access.
46 kortelė
Klausimas
What can unexpected account lockouts indicate?
Atsakymas
Password guessing, credential stuffing, user error, or a broken client.
47 kortelė
Klausimas
How do permissions enforce access control?
Atsakymas
They specify which actions a subject may perform on a particular resource.
48 kortelė
Klausimas
What is log aggregation?
Atsakymas
Central collection of logs from multiple sources for search, correlation, and retention.
49 kortelė
Klausimas
Why plan a service restart as part of a change?
Atsakymas
The restart can interrupt dependent users or processes, so the plan needs timing, validation, and rollback steps.
50 kortelė
Klausimas
What is infrastructure as code?
Atsakymas
Managing infrastructure through versioned, machine-readable definitions rather than manual configuration.
51 kortelė
Klausimas
What should security-awareness program development start with?
Atsakymas
The audience's roles, risks, policies, incident lessons, desired behavior, and measurable outcomes.
52 kortelė
Klausimas
What is a voice-based social-engineering attack called?
Atsakymas
Vishing.
53 kortelė
Klausimas
What happens during incident-response preparation?
Atsakymas
Teams establish people, tools, access, communications, training, and procedures before an incident.
54 kortelė
Klausimas
What does an offensive penetration-testing team do?
Atsakymas
It emulates authorized attacker behavior to discover and demonstrate exploitable paths.
55 kortelė
Klausimas
What is federation?
Atsakymas
One security domain relies on identity assertions from another trusted domain.
56 kortelė
Klausimas
What is asset classification?
Atsakymas
Grouping an asset by sensitivity, criticality, or required handling.
57 kortelė
Klausimas
What is cross-site scripting?
Atsakymas
Injection of script-capable content that a browser executes in another site's security context.
58 kortelė
Klausimas
What can IDS or IPS trends reveal?
Atsakymas
Changes in the frequency, source, target, or type of detected activity that one isolated event may not show.
59 kortelė
Klausimas
What can unexpected resource inaccessibility indicate?
Atsakymas
Denial of service, destructive activity, ransomware, permission changes, or an ordinary outage.
60 kortelė
Klausimas
What is a corrective control meant to do?
Atsakymas
Limit damage and restore a secure state after an event.
61 kortelė
Klausimas
How do containers differ from virtual machines?
Atsakymas
Containers share the host kernel; virtual machines normally run separate guest operating systems.
62 kortelė
Klausimas
How does an active security device differ from a passive one?
Atsakymas
An active device can alter or block traffic; a passive device observes and reports without changing the flow.
63 kortelė
Klausimas
Why is unsupported software a persistent attack surface?
Atsakymas
Known weaknesses may remain reachable because supported fixes and vendor help are no longer available.
64 kortelė
Klausimas
What is annualized rate of occurrence?
Atsakymas
The estimated number of times a risk event occurs per year.
65 kortelė
Klausimas
What is an inherence factor?
Atsakymas
A biometric characteristic of the claimant.
66 kortelė
Klausimas
What do a threat actor's sophistication and capability describe?
Atsakymas
The technical skill, tools, knowledge, resources, and operational discipline the actor can apply.
67 kortelė
Klausimas
What is a SIEM?
Atsakymas
A platform that centralizes security data and supports search, correlation, alerting, and investigation.
68 kortelė
Klausimas
What is sideloading?
Atsakymas
Installing software from outside the platform's approved distribution path.
69 kortelė
Klausimas
What does an IDS or IPS signature match?
Atsakymas
A known pattern in traffic or behavior associated with a threat, exploit, or policy violation.
70 kortelė
Klausimas
Why are embedded systems often difficult to patch?
Atsakymas
They may have long lifecycles, specialized firmware, limited downtime, or weak vendor support.
71 kortelė
Klausimas
What is a virtual private network?
Atsakymas
An encrypted logical connection that carries private traffic across an untrusted or shared network.
72 kortelė
Klausimas
What should an initial security-awareness report establish?
Atsakymas
The starting participation, knowledge, behavior, incident, and reporting measures against which later results will be compared.
73 kortelė
Klausimas
What is symmetric encryption?
Atsakymas
Encryption that uses the same secret key to encrypt and decrypt data.
74 kortelė
Klausimas
What happens during incident detection?
Atsakymas
Monitoring or a report identifies activity that may meet the organization's incident criteria.
75 kortelė
Klausimas
What is recovery time objective?
Atsakymas
The target maximum time to restore a function after disruption.
76 kortelė
Klausimas
Why prioritize password length?
Atsakymas
Longer passwords expand the guessing space and support memorable passphrases without predictable substitutions.
77 kortelė
Klausimas
What must sanitization accomplish before an asset leaves organizational control?
Atsakymas
It must make the retained data infeasible to recover with the method appropriate to the media and risk.
78 kortelė
Klausimas
What is a real-time operating system designed to provide?
Atsakymas
Predictable response timing for tasks with strict deadlines.
79 kortelė
Klausimas
What does fail-open behavior do when a control fails?
Atsakymas
It permits traffic or access to preserve availability.
80 kortelė
Klausimas
What is jailbreaking or rooting a mobile device?
Atsakymas
Removing platform restrictions to gain privileged control over the operating system.
81 kortelė
Klausimas
What does network access control enforce?
Atsakymas
Identity, device posture, and access policy at network connection time and during a session.
82 kortelė
Klausimas
What does data loss prevention do?
Atsakymas
Detects and may block sensitive data use or transfer that violates policy.
83 kortelė
Klausimas
What security property does a blockchain provide?
Atsakymas
A chained, tamper-evident record in which changing an earlier entry invalidates later cryptographic links.
84 kortelė
Klausimas
What is recovery point objective?
Atsakymas
The target maximum acceptable data loss measured backward in time.
85 kortelė
Klausimas
How do ICS and SCADA relate?
Atsakymas
An industrial control system controls physical processes; SCADA provides supervisory monitoring and control across distributed industrial equipment.
86 kortelė
Klausimas
What does fail-closed behavior do when a control fails?
Atsakymas
It denies traffic or access to preserve security.
87 kortelė
Klausimas
Which keys create and verify a typical digital signature?
Atsakymas
The signer creates it with a private key, and others verify it with the corresponding public key.
88 kortelė
Klausimas
What is SQL injection?
Atsakymas
Input that alters the structure or meaning of a database query because code and data were not safely separated.
89 kortelė
Klausimas
What does DKIM verify?
Atsakymas
That selected message content was signed by a domain and was not altered after signing.
90 kortelė
Klausimas
What is post-incident activity?
Atsakymas
Learning from the event and improving controls, plans, and recovery based on evidence.
91 kortelė
Klausimas
What characterizes an expansionary risk appetite?
Atsakymas
A greater willingness to accept uncertainty and exposure in pursuit of growth, return, or strategic opportunity.
92 kortelė
Klausimas
How do centralized and decentralized architectures differ?
Atsakymas
Centralized architecture concentrates key services or decisions; decentralized architecture distributes them across independent components or locations.
93 kortelė
Klausimas
What does a certificate revocation list publish?
Atsakymas
Certificate serial numbers that the issuer has invalidated before their scheduled expiration.
94 kortelė
Klausimas
What is a legal hold?
Atsakymas
A directive to preserve potentially relevant information by suspending normal deletion or disposal.
95 kortelė
Klausimas
What is exposure factor in quantitative risk analysis?
Atsakymas
The estimated percentage of an asset's value lost in one event.
96 kortelė
Klausimas
What is decentralized architecture?
Atsakymas
Control or service responsibility is distributed across multiple independent components or locations.
97 kortelė
Klausimas
What is tokenization?
Atsakymas
Replacing sensitive data with a non-sensitive token whose mapping is held separately.
98 kortelė
Klausimas
How can automation act as a workforce multiplier?
Atsakymas
It handles repeatable work consistently so people can focus on judgment, exceptions, investigation, and improvement.
99 kortelė
Klausimas
What can endpoint process logs reveal?
Atsakymas
Which programs ran, their parent-child relationships, users, timing, and command details when captured.
100 kortelė
Klausimas
What does the CIA triad protect?
Atsakymas
Confidentiality protects against unauthorized disclosure, integrity protects accuracy and completeness, and availability protects reliable, timely access.
101 kortelė
Klausimas
How does data masking protect information?
Atsakymas
It hides selected values or characters while preserving a usable representation.
102 kortelė
Klausimas
How can a national requirement affect security governance?
Atsakymas
It can impose country-level duties that policies, controls, records, and oversight must satisfy.
103 kortelė
Klausimas
What do integrations and APIs provide to security orchestration?
Atsakymas
Defined interfaces for exchanging data and triggering actions across tools without manual handoffs.
104 kortelė
Klausimas
What makes a compliance report external?
Atsakymas
It is prepared for a regulator, customer, auditor, partner, or other party outside the organization.
105 kortelė
Klausimas
What does a cryptographic algorithm define?
Atsakymas
The mathematical procedure used to encrypt, decrypt, hash, sign, or otherwise transform protected data.
106 kortelė
Klausimas
Why compare systems with a secure baseline regularly?
Atsakymas
To detect drift, unauthorized changes, and missing hardening.
107 kortelė
Klausimas
What does integrity protect?
Atsakymas
The accuracy and completeness of data and systems against unauthorized change.
108 kortelė
Klausimas
What does vulnerability classification organize?
Atsakymas
Findings into meaningful types or categories so teams can route, compare, and remediate them consistently.
109 kortelė
Klausimas
What does a password standard define?
Atsakymas
Mandatory, measurable requirements for creating, storing, using, and changing passwords.
110 kortelė
Klausimas
What technology capacity must a recovery design plan for?
Atsakymas
The compute, storage, software, licenses, and supporting services needed to meet recovery demand.
111 kortelė
Klausimas
What does a confidential data classification indicate?
Atsakymas
Disclosure is limited to authorized people because exposure could harm the organization or affected parties.
112 kortelė
Klausimas
What makes a vendor assessment independent?
Atsakymas
The assessor is free from responsibility for the vendor activity being evaluated and reports evidence against defined criteria.
113 kortelė
Klausimas
What lets a worm spread without attaching itself to another file?
Atsakymas
It is a standalone program that replicates across reachable systems or services.
114 kortelė
Klausimas
What is microsegmentation?
Atsakymas
Fine-grained isolation of individual workloads or small groups with explicit communication policy.
115 kortelė
Klausimas
What can application logs reveal?
Atsakymas
Transactions, errors, user actions, and application-specific security events.
116 kortelė
Klausimas
What does deploying a secure baseline require?
Atsakymas
Applying the approved settings consistently to the intended resources and verifying the realized configuration.
117 kortelė
Klausimas
How can resource-provisioning automation improve security?
Atsakymas
It creates infrastructure from approved templates with consistent ownership, logging, and baseline controls.
118 kortelė
Klausimas
What does availability protect?
Atsakymas
Reliable, timely access to systems and data when authorized users need them.
119 kortelė
Klausimas
Why must a change request describe business impact?
Atsakymas
So approvers can weigh the benefit, risk, outage, and affected users before authorizing it.
120 kortelė
Klausimas
What does an authenticated vulnerability scan add?
Atsakymas
Credentialed inspection of local versions, settings, and missing patches that a remote scan may miss.
121 kortelė
Klausimas
What does a change-management procedure specify?
Atsakymas
The required steps, roles, evidence, approvals, testing, implementation, validation, and rollback for a change.
122 kortelė
Klausimas
What is a sanction for noncompliance?
Atsakymas
A formal penalty or restriction imposed by an authority for failing to meet a requirement.
123 kortelė
Klausimas
How can email deliver a security attack?
Atsakymas
It can carry a malicious link, attachment, request, or embedded content designed to exploit software or manipulate a recipient.
124 kortelė
Klausimas
What is an internal compliance audit?
Atsakymas
An organization-led examination of whether selected operations and controls meet defined requirements.
125 kortelė
Klausimas
What is a Trojan?
Atsakymas
Malware disguised as legitimate or desirable software.
126 kortelė
Klausimas
What is clustering?
Atsakymas
Multiple systems work together to provide a service and tolerate member failure.
127 kortelė
Klausimas
What makes data regulated?
Atsakymas
A law or regulation imposes specific collection, handling, retention, protection, or disclosure duties.
128 kortelė
Klausimas
What does a wireless heat map show?
Atsakymas
Measured or modeled signal strength and coverage across a physical area.
129 kortelė
Klausimas
How should vendor criticality affect due diligence?
Atsakymas
Higher access, concentration, data sensitivity, or operational dependence warrants deeper evidence and stronger approval.
130 kortelė
Klausimas
How can a digital signature support non-repudiation?
Atsakymas
It provides evidence that the holder of a private key signed specific data.
131 kortelė
Klausimas
What should vulnerability prioritization consider beyond severity?
Atsakymas
Exploitability, exposure, asset importance, environmental context, business impact, and available mitigations.
132 kortelė
Klausimas
What is a security guideline?
Atsakymas
Recommended practice that allows judgment unless adopted as a requirement.
133 kortelė
Klausimas
What usually distinguishes a nation-state threat actor?
Atsakymas
Strategic objectives, substantial resources, patience, and advanced operational capability.
134 kortelė
Klausimas
What is spyware?
Atsakymas
Software that secretly collects information about a user or system.
135 kortelė
Klausimas
Why maintain an allow list for applications?
Atsakymas
Only explicitly approved software is permitted to execute.
136 kortelė
Klausimas
How can an image become an attack vector?
Atsakymas
It may exploit a decoder flaw, hide malicious data, or direct a user through an embedded code.
137 kortelė
Klausimas
What makes a security control technical?
Atsakymas
It is enforced mainly by technology, such as a firewall rule or endpoint policy.
138 kortelė
Klausimas
What is identity proofing?
Atsakymas
Establishing that a person is who they claim to be before issuing an account or credential.
139 kortelė
Klausimas
What is an automated security guardrail?
Atsakymas
A policy control that prevents, flags, or corrects unsafe configuration, such as an overexposed security group.
140 kortelė
Klausimas
Why assign an owner to a planned change?
Atsakymas
To make one party accountable for coordination, execution, and follow-through.
141 kortelė
Klausimas
How can national privacy law affect data handling?
Atsakymas
It can set country-level duties for collection, use, access, retention, transfer, security, and individual rights.
142 kortelė
Klausimas
What is continuity of operations?
Atsakymas
Maintaining essential functions during disruption and restoring supporting capabilities in a planned order.
143 kortelė
Klausimas
What security tradeoff comes with BYOD?
Atsakymas
The organization gains flexibility but has less control over personally owned device configuration, privacy, and lifecycle.
144 kortelė
Klausimas
How should policies and handbooks support security training?
Atsakymas
They provide accessible, current rules and reporting steps that training can apply to real situations.
145 kortelė
Klausimas
What is a keylogger?
Atsakymas
A tool that records keystrokes to capture data such as credentials.
146 kortelė
Klausimas
What makes information a trade secret?
Atsakymas
It provides business value because it is not generally known and is protected through reasonable secrecy measures.
147 kortelė
Klausimas
What does authentication establish?
Atsakymas
It verifies a presented authenticator or credential bound to the claimed identity. Identity proofing establishes the real-world identity behind the claim.
148 kortelė
Klausimas
What risk comes from an untrusted file attachment?
Atsakymas
Opening or parsing it can execute malicious code or expose data.
149 kortelė
Klausimas
How does risk tolerance affect vulnerability remediation?
Atsakymas
It sets how much residual exposure the organization will accept and how quickly a finding must be treated.
150 kortelė
Klausimas
How can a global requirement affect security governance?
Atsakymas
It can require a common control and oversight approach across multiple countries while local obligations still apply.
151 kortelė
Klausimas
Why should questionnaire answers be supported by evidence?
Atsakymas
Self-assertions alone may not prove that controls are designed or operating effectively.
152 kortelė
Klausimas
What is an independent third-party audit?
Atsakymas
An external party with suitable independence examines evidence against defined criteria.
153 kortelė
Klausimas
What do account provisioning and deprovisioning do?
Atsakymas
Provisioning creates an identity and approved access; deprovisioning disables or removes accounts, credentials, sessions, and access when no longer needed.
154 kortelė
Klausimas
What is an unskilled attacker commonly called?
Atsakymas
A script kiddie: someone who relies on tools or instructions created by others.
155 kortelė
Klausimas
What is a rootkit?
Atsakymas
Software designed to maintain privileged, concealed access by altering or subverting the system.
156 kortelė
Klausimas
What does an access control list enforce?
Atsakymas
Explicit permit or deny rules for subjects, traffic, or actions on a protected resource.
157 kortelė
Klausimas
What should system security monitoring observe?
Atsakymas
Host state and behavior such as processes, authentication, configuration, resource use, and security events.
158 kortelė
Klausimas
What can operating-system security logs reveal?
Atsakymas
Authentication, privilege use, policy changes, services, and other host security events.
159 kortelė
Klausimas
Why isolate operational technology from general business networks?
Atsakymas
To limit attack paths into safety- and availability-critical processes.
160 kortelė
Klausimas
What is the COPE mobile deployment model?
Atsakymas
The organization owns the device but permits defined personal use while retaining management control.
161 kortelė
Klausimas
What security work belongs in asset acquisition and procurement?
Atsakymas
Define security requirements before purchase, evaluate the product and vendor against them, and obtain approval before acquisition or deployment.
162 kortelė
Klausimas
How can user-provisioning automation improve security?
Atsakymas
It creates, changes, and removes access from authoritative identity events with consistent approvals and logging.
163 kortelė
Klausimas
What people capacity must a continuity plan account for?
Atsakymas
Enough trained staff, coverage, authority, and specialist knowledge to operate and recover essential services.
164 kortelė
Klausimas
What do authorization models define?
Atsakymas
How permissions are assigned to authenticated subjects and evaluated for requested actions.
165 kortelė
Klausimas
Why are removable devices an attack vector?
Atsakymas
They can introduce malware or remove data while bypassing network controls.
166 kortelė
Klausimas
What should predeployment change-test results show?
Atsakymas
Whether the change meets its acceptance criteria without unacceptable functional, security, or operational effects.
167 kortelė
Klausimas
What is the time-of-use stage of a race-condition vulnerability?
Atsakymas
The application acts on a resource after the check, creating a gap in which another process may change the resource.
168 kortelė
Klausimas
What is data in use?
Atsakymas
Data actively processed in memory or by an application.
169 kortelė
Klausimas
What does open-source vulnerability intelligence contribute?
Atsakymas
Public advisories, exploit reporting, research, and observable activity that help identify and prioritize exposure.
170 kortelė
Klausimas
What can file-integrity monitoring detect?
Atsakymas
Unexpected changes to protected files, directories, or configuration.
171 kortelė
Klausimas
Why should deprovisioning be prompt?
Atsakymas
Former users or roles should not retain usable access.
172 kortelė
Klausimas
What is an acceptable use policy?
Atsakymas
Rules for permitted and prohibited use of organizational systems, accounts, and data.
173 kortelė
Klausimas
What makes a compliance report internal?
Atsakymas
It is prepared for the organization's owners, operators, management, or governance bodies to track compliance and action.
174 kortelė
Klausimas
What is a logic bomb?
Atsakymas
Malicious code that activates when a specified condition or time is reached.
175 kortelė
Klausimas
What does a right-to-audit clause provide?
Atsakymas
Contractual authority to inspect or obtain evidence about agreed controls.
176 kortelė
Klausimas
Where should a forward proxy sit in an enterprise traffic path?
Atsakymas
Between clients and external services so outbound requests pass through policy and logging before reaching destinations.
177 kortelė
Klausimas
Which cues should make a message look suspicious?
Atsakymas
Unexpected context, mismatched identity or links, unusual attachments, urgency, secrecy, and requests for credentials or payment.
178 kortelė
Klausimas
What makes a security control managerial?
Atsakymas
It directs risk and governance through decisions such as policies, assessments, and oversight.
179 kortelė
Klausimas
What is the CYOD mobile deployment model?
Atsakymas
The user selects from organization-approved device options that remain subject to corporate security requirements.
180 kortelė
Klausimas
How does client-based vulnerable software differ from an agentless exposure?
Atsakymas
Client-based exposure depends on installed endpoint software, while an agentless service can be reached and assessed without a local agent.
181 kortelė
Klausimas
What makes a risk assessment recurring?
Atsakymas
It is repeated on a defined schedule so changes in threats, assets, controls, and impact are reevaluated.
182 kortelė
Klausimas
What does a defensive penetration-testing team practice?
Atsakymas
Detection, investigation, containment, and improvement while authorized offensive activity tests the environment.
183 kortelė
Klausimas
In a zero-trust data plane, what can the subject or system represent?
Atsakymas
The user, device, workload, or service requesting access to a protected resource.
184 kortelė
Klausimas
What primarily motivates a hacktivist?
Atsakymas
A political, social, or ideological cause.
185 kortelė
Klausimas
What is bloatware?
Atsakymas
Unnecessary preinstalled software that consumes resources and can expand the attack surface.
186 kortelė
Klausimas
Why keep endpoint-protection signatures and engines current?
Atsakymas
They need current detection logic to recognize newly identified malware and exploit behavior.
187 kortelė
Klausimas
What should application security monitoring observe?
Atsakymas
Application errors, authentication, requests, transactions, dependencies, and behavior that may indicate misuse or compromise.
188 kortelė
Klausimas
What is role-based access control?
Atsakymas
Permissions are assigned to roles, and identities receive access through their roles.
189 kortelė
Klausimas
What is geographic dispersal?
Atsakymas
Placing redundant resources in separate locations so one regional event does not affect all copies.
190 kortelė
Klausimas
What is a malicious update?
Atsakymas
An update that has been intentionally altered or distributed to install harmful code through a trusted update path.
191 kortelė
Klausimas
What does static application analysis inspect?
Atsakymas
Source code, bytecode, or compiled code without executing the application.
192 kortelė
Klausimas
What does a firewall access list define?
Atsakymas
An ordered set of traffic-matching conditions and the action applied when a condition matches.
193 kortelė
Klausimas
What does a disaster recovery policy establish?
Atsakymas
Management expectations for restoring technology and data after a disruptive event.
194 kortelė
Klausimas
How does logical segmentation separate workloads that share physical infrastructure?
Atsakymas
It uses enforced network, identity, or virtualization boundaries to restrict communication without requiring separate hardware.
195 kortelė
Klausimas
How should IDS and IPS placement differ?
Atsakymas
An IDS can monitor copied traffic out of band; an IPS must sit inline to block traffic.
196 kortelė
Klausimas
What should automated ticket creation capture?
Atsakymas
The triggering evidence, affected resource, severity, owner, required action, and a traceable link to the source event.
197 kortelė
Klausimas
What makes information intellectual property?
Atsakymas
It is a protected creation or intangible asset, such as copyrighted work, a patentable invention, a trademark, or a trade secret.
198 kortelė
Klausimas
What is a backout plan?
Atsakymas
Predefined steps for safely reversing a failed or harmful change.
199 kortelė
Klausimas
Why is an unsecure wireless network an attack vector?
Atsakymas
Nearby attackers may intercept traffic, impersonate access points, or reach exposed services when encryption and authentication are weak.
200 kortelė
Klausimas
What is physical brute force?
Atsakymas
Using force to defeat a lock, barrier, enclosure, or other physical control.
201 kortelė
Klausimas
What is application sandboxing?
Atsakymas
Running code in a constrained environment with limited access to the host and data.
202 kortelė
Klausimas
Why assign an asset owner?
Atsakymas
One accountable party must decide its use, protection, and lifecycle.
203 kortelė
Klausimas
What happens during risk identification?
Atsakymas
Teams identify assets, objectives, threats, vulnerabilities, events, and dependencies that could create uncertainty or harm.
204 kortelė
Klausimas
What should an SLA state about breach notification?
Atsakymas
The triggering conditions, notification deadline, required content, contacts, update cadence, and cooperation duties.
205 kortelė
Klausimas
How do due diligence and due care differ in compliance?
Atsakymas
Due diligence investigates and monitors obligations or risk; due care takes the reasonable actions those findings require.
206 kortelė
Klausimas
What is attribute-based access control?
Atsakymas
Policy evaluates attributes of the subject, resource, action, and environment.
207 kortelė
Klausimas
What does a zero-trust policy engine do?
Atsakymas
It evaluates policy and signals to decide whether access should be allowed.
208 kortelė
Klausimas
How does a cloud responsibility matrix allocate security duties?
Atsakymas
It maps each security task to the provider, the customer, or both, according to the service model and agreement.
209 kortelė
Klausimas
Where should a load balancer sit in a service path?
Atsakymas
In front of service instances so it can route requests to healthy backends.
210 kortelė
Klausimas
What should the security team do with a reported suspicious message?
Atsakymas
Triage it, protect other recipients, preserve useful evidence, and tell the reporter what action to take.
211 kortelė
Klausimas
What makes an operating-system vulnerability high impact?
Atsakymas
It can affect every application and security control that relies on the compromised OS.
212 kortelė
Klausimas
What does dynamic application analysis inspect?
Atsakymas
The behavior and externally visible weaknesses of a running application.
213 kortelė
Klausimas
How can false-positive trends affect IDS or IPS tuning?
Atsakymas
Repeated false positives reveal signatures, thresholds, or contexts that need adjustment; IPS errors also risk blocking legitimate traffic.
214 kortelė
Klausimas
What does a business continuity policy establish?
Atsakymas
Management expectations for sustaining and restoring critical business functions.
215 kortelė
Klausimas
What is a hot recovery site?
Atsakymas
A ready, synchronized environment intended to take over quickly.
216 kortelė
Klausimas
What makes an insider threat distinct?
Atsakymas
The actor has legitimate access or organizational knowledge that can be misused.
217 kortelė
Klausimas
What is RFID cloning?
Atsakymas
Copying an RFID credential's data so another token can impersonate it when the system lacks stronger protections.
218 kortelė
Klausimas
Why apply vendor security updates promptly?
Atsakymas
They remove known weaknesses before attackers can exploit the unpatched exposure.
219 kortelė
Klausimas
What should infrastructure security monitoring observe?
Atsakymas
Network, cloud, identity, facility, and platform signals that reveal availability, configuration, or attack activity.
220 kortelė
Klausimas
What can firewall logs reveal?
Atsakymas
Allowed or denied network connections across controlled boundaries.
221 kortelė
Klausimas
Why minimize open service ports?
Atsakymas
Each reachable service adds code, configuration, and authentication paths an attacker can probe.
222 kortelė
Klausimas
What is threat hunting?
Atsakymas
A proactive search for evidence of malicious activity that existing detections have not confirmed.
223 kortelė
Klausimas
What triggers an ad hoc risk assessment?
Atsakymas
A specific change, incident, finding, or decision that requires evaluation outside the regular schedule.
224 kortelė
Klausimas
What makes an assessment external?
Atsakymas
A party outside the organization evaluates a defined scope against stated criteria and reports its conclusions.
225 kortelė
Klausimas
What is data sovereignty?
Atsakymas
The principle that data is subject to laws and governance of the jurisdiction where it is located or controlled.
226 kortelė
Klausimas
What security boundary does a cellular connection create for a mobile device?
Atsakymas
It uses the carrier network instead of local Wi-Fi, but still requires trusted applications, encrypted traffic, and managed device policy.
227 kortelė
Klausimas
What makes a security control operational?
Atsakymas
It is carried out mainly by people and processes, such as security-awareness training or incident-response procedures.
228 kortelė
Klausimas
What is discretionary access control?
Atsakymas
A resource owner can decide who receives access, within system policy.
229 kortelė
Klausimas
How can careful automation support employee retention?
Atsakymas
It reduces repetitive toil and alert handling while leaving meaningful judgment and improvement work with people.
230 kortelė
Klausimas
Why does ease of deployment matter in an architecture decision?
Atsakymas
A design that can be deployed consistently and safely reduces configuration error, rollout time, and operational burden.
231 kortelė
Klausimas
What tradeoff comes with placing an NGFW inline?
Atsakymas
It can block application-aware threats, but failure or overload can interrupt traffic unless availability and fail-mode behavior are designed.
232 kortelė
Klausimas
What does a zero-trust policy administrator do?
Atsakymas
It carries out the policy engine's decision, such as creating or ending a session.
233 kortelė
Klausimas
What should a master service agreement define for data return and deletion?
Atsakymas
The format, timing, verification, retained copies, exceptions, and responsibilities when the service or contract ends.
234 kortelė
Klausimas
What is an environmental physical attack?
Atsakymas
Causing harmful conditions such as heat, water, fire, or power loss to disrupt equipment or facilities.
235 kortelė
Klausimas
When should a maintenance window be chosen?
Atsakymas
When disruption and rollback can be managed with the least business impact.
236 kortelė
Klausimas
What is memory injection?
Atsakymas
Placing malicious code or data into another process's memory so it executes in that process's context.
237 kortelė
Klausimas
What does software composition analysis find?
Atsakymas
Known risks and license information in third-party dependencies.
238 kortelė
Klausimas
What is DNS filtering?
Atsakymas
Blocking or redirecting DNS lookups for domains that policy considers malicious or inappropriate.
239 kortelė
Klausimas
What should an incident response policy establish?
Atsakymas
Authority, scope, reporting duties, and organizational commitment for incident handling.
240 kortelė
Klausimas
How can noncompliance cause reputational damage?
Atsakymas
Customers, partners, employees, or the public may lose trust when the organization fails a stated or required duty.
241 kortelė
Klausimas
What does full-disk encryption protect?
Atsakymas
All data stored on the disk while the device is powered off or the disk is removed, subject to proper key protection.
242 kortelė
Klausimas
Why are default credentials dangerous?
Atsakymas
They are widely known or easily discovered and often remain unchanged.
243 kortelė
Klausimas
What makes a risk assessment one-time?
Atsakymas
It evaluates a defined decision or scope once without an established repeating cadence.
244 kortelė
Klausimas
What is a warm recovery site?
Atsakymas
A partially equipped environment that needs some data restoration or configuration before use.
245 kortelė
Klausimas
What does application input validation do?
Atsakymas
It checks that input matches the expected type, length, range, and format before use.
246 kortelė
Klausimas
What should an asset inventory record besides a device name?
Atsakymas
Identifiers, owner, location, status, classification, dependencies, and supported version as applicable.
247 kortelė
Klausimas
What is mandatory access control?
Atsakymas
A central authority enforces access through labels and rules that ordinary owners cannot override.
248 kortelė
Klausimas
What security benefit does infrastructure as code provide?
Atsakymas
Repeatable, reviewable deployments that reduce undocumented configuration drift.
249 kortelė
Klausimas
When should a public service control fail closed?
Atsakymas
When allowing unchecked traffic would create greater harm than an outage, the failed control should block the path.
250 kortelė
Klausimas
What should users do with a suspicious message?
Atsakymas
Report it through the approved channel without interacting with its links or attachments.
251 kortelė
Klausimas
What usually motivates organized cybercrime?
Atsakymas
Financial gain through scalable or repeatable criminal activity.
252 kortelė
Klausimas
How can malicious code support a network attack?
Atsakymas
It can establish control, scan reachable systems, move laterally, or disrupt networked services after execution.
253 kortelė
Klausimas
When is virtual patching useful?
Atsakymas
When a network or application control can block exploit traffic before the underlying system can be patched.
254 kortelė
Klausimas
What does security-monitoring reporting provide?
Atsakymas
A summarized, audience-appropriate view of findings, trends, risk, and response status.
255 kortelė
Klausimas
What does data geolocation identify?
Atsakymas
The physical or legal location where data is stored, processed, or transmitted.
256 kortelė
Klausimas
What does a zero-trust policy enforcement point do?
Atsakymas
It enables, monitors, and terminates the connection between a subject and a resource.
257 kortelė
Klausimas
What is cryptographic key exchange?
Atsakymas
A method for parties to establish shared key material over an untrusted channel.
258 kortelė
Klausimas
How can a vendor become a supply-chain attack vector?
Atsakymas
An attacker can compromise the vendor's product, update, credentials, or support channel to reach the vendor's customers.
259 kortelė
Klausimas
Why can legacy hardware remain vulnerable?
Atsakymas
It may lack current security features, supported firmware, replacement parts, or compatibility with modern controls.
260 kortelė
Klausimas
What can proprietary vulnerability intelligence add beyond open sources?
Atsakymas
Curated analysis, customer-specific context, private telemetry, or earlier reporting available under a commercial or trusted relationship.
261 kortelė
Klausimas
How does a centralized proxy apply web filtering?
Atsakymas
It receives client web requests at a shared enforcement point and applies policy before forwarding allowed traffic.
262 kortelė
Klausimas
How can continuous integration and testing improve security automation?
Atsakymas
Changes receive repeatable checks before deployment instead of reaching production unvalidated.
263 kortelė
Klausimas
What is containment?
Atsakymas
Limiting an incident's spread or damage while preserving necessary operations and evidence.
264 kortelė
Klausimas
What is a software development lifecycle policy meant to ensure?
Atsakymas
Security requirements and checks are integrated throughout design, development, release, and maintenance.
265 kortelė
Klausimas
What makes risk assessment continuous?
Atsakymas
Relevant signals and changes update the risk view as they occur instead of waiting for a scheduled review.
266 kortelė
Klausimas
What is a memorandum of agreement?
Atsakymas
A document that records agreed responsibilities and commitments between parties; its legal effect depends on its terms and jurisdiction.
267 kortelė
Klausimas
What makes a penetration test integrated?
Atsakymas
Offensive and defensive teams coordinate the exercise to test both attack paths and detection or response.
268 kortelė
Klausimas
How does a DNS amplification attack magnify traffic?
Atsakymas
It sends small spoofed queries that trigger larger replies toward the victim.
269 kortelė
Klausimas
Why does ease of recovery matter in an architecture decision?
Atsakymas
The design should let operators restore service and trusted state without fragile, slow, or undocumented steps.
270 kortelė
Klausimas
What does 802.1X control before a device receives normal network access?
Atsakymas
Port-based admission; the device or user must authenticate through the access device before ordinary traffic is allowed.
271 kortelė
Klausimas
What is rule-based access control?
Atsakymas
System-wide rules grant or deny access based on conditions such as network, time, or action.
272 kortelė
Klausimas
What is mobile device management?
Atsakymas
Central enrollment, configuration, monitoring, and enforcement for managed mobile devices.
273 kortelė
Klausimas
What tradeoff comes with a cold recovery site?
Atsakymas
It costs less to maintain, but recovery takes longer because systems, data, and connectivity must be prepared after activation.
274 kortelė
Klausimas
Why identify stakeholders before approving a security-sensitive change?
Atsakymas
They can identify operational impact, dependencies, and acceptance criteria that the implementer may otherwise miss.
275 kortelė
Klausimas
How do attestation and acknowledgement differ?
Atsakymas
Attestation asserts that a condition or control is true; acknowledgement confirms receipt or understanding of a requirement.
276 kortelė
Klausimas
What does zero-trust adaptive identity mean?
Atsakymas
Access decisions adjust to current risk signals rather than relying only on a static login.
277 kortelė
Klausimas
What makes a security control physical?
Atsakymas
It protects facilities or equipment through a tangible barrier or mechanism.
278 kortelė
Klausimas
What is geo-fencing for data?
Atsakymas
Enforcing location-based boundaries on where data or services may be accessed or operated.
279 kortelė
Klausimas
What does a Trusted Platform Module protect?
Atsakymas
Hardware-backed keys and measurements used for device identity, disk protection, and boot-state attestation.
280 kortelė
Klausimas
Why can a managed service provider amplify risk?
Atsakymas
Its privileged access and shared tooling can provide a path into many customers.
281 kortelė
Klausimas
What does probability express in risk analysis?
Atsakymas
A quantified chance that a defined event will occur within stated conditions or time.
282 kortelė
Klausimas
Why can shadow IT create a threat?
Atsakymas
It bypasses security review, inventory, monitoring, and supported configuration.
283 kortelė
Klausimas
What is on-path interception?
Atsakymas
An attacker positions between communicating parties to observe or alter traffic.
284 kortelė
Klausimas
Why include encryption in a system-hardening baseline?
Atsakymas
It limits data exposure if storage, traffic, or a protected secret is accessed outside the intended trust boundary.
285 kortelė
Klausimas
Why tune security alerts?
Atsakymas
To keep useful detections while reducing noise that wastes analyst attention.
286 kortelė
Klausimas
What can IPS or IDS logs contribute to an investigation?
Atsakymas
The matched rule or signature, source and destination, timestamp, action, and traffic context around detected activity.
287 kortelė
Klausimas
What is VM escape?
Atsakymas
A vulnerability that lets code break out of a virtual machine and affect the host or another guest.
288 kortelė
Klausimas
How can segmentation reduce vulnerability exposure before a patch is available?
Atsakymas
It limits which systems and users can reach the vulnerable service and restricts paths for lateral movement.
289 kortelė
Klausimas
Why should firewall policy name the required ports and protocols explicitly?
Atsakymas
Explicit scope permits only the intended service traffic and avoids exposing unnecessary network paths.
290 kortelė
Klausimas
What is a change management policy meant to control?
Atsakymas
How changes are requested, assessed, approved, tested, implemented, and reviewed.
291 kortelė
Klausimas
What is a hybrid-cloud architecture?
Atsakymas
An environment that integrates private or on-premises resources with public cloud services.
292 kortelė
Klausimas
How do AH and ESP differ in the security services they can provide?
Atsakymas
AH provides integrity and data-origin authentication without confidentiality. ESP can provide confidentiality and may also provide integrity and data-origin authentication. Actual services depend on AH or ESP, mode, algorithms, and policy/configuration.
293 kortelė
Klausimas
What makes user behavior risky?
Atsakymas
It creates avoidable exposure, such as bypassing controls, mishandling data, or using unapproved access paths.
294 kortelė
Klausimas
What is least privilege?
Atsakymas
Granting only the access needed for the required task and no more.
295 kortelė
Klausimas
What do Secure, HttpOnly, and SameSite cookie attributes restrict?
Atsakymas
Transmission to HTTPS, script access, and cross-site sending, respectively.
296 kortelė
Klausimas
Why discover unmanaged assets?
Atsakymas
Unknown systems cannot be patched, monitored, or governed reliably.
297 kortelė
Klausimas
What is a service-level agreement?
Atsakymas
Measurable service commitments and remedies, such as availability or response targets.
298 kortelė
Klausimas
What should govern automated security escalation?
Atsakymas
Clear severity criteria, ownership, evidence, rate limits, and a fallback path when the automation cannot decide safely.
299 kortelė
Klausimas
What is platform diversity as a resilience strategy?
Atsakymas
Using different implementations so one common flaw or failure is less likely to affect every copy.
300 kortelė
Klausimas
How can replayed session material affect an application?
Atsakymas
It can let an attacker reuse a captured token or request to impersonate a valid session or repeat an authorized action.
301 kortelė
Klausimas
What is an implicit trust zone in zero trust?
Atsakymas
A boundary where access was previously trusted by location alone and must instead receive explicit policy enforcement.
302 kortelė
Klausimas
What does salting a password hash accomplish?
Atsakymas
It makes identical passwords hash differently and defeats precomputed hash tables.
303 kortelė
Klausimas
What is spear phishing?
Atsakymas
Phishing tailored to a specific person, role, or organization.
304 kortelė
Klausimas
What is eradication?
Atsakymas
Removing the attacker's access, malicious artifacts, and exploited conditions.
305 kortelė
Klausimas
Who is a risk owner?
Atsakymas
The person accountable for deciding and monitoring how a specific risk is handled.
306 kortelė
Klausimas
What does a partially known penetration-test environment provide?
Atsakymas
The tester receives limited information or access, modeling an attacker with some insider knowledge or initial foothold.
307 kortelė
Klausimas
What is a microservices architecture?
Atsakymas
An application is split into small independently deployable services with explicit interfaces and distributed trust boundaries.
308 kortelė
Klausimas
What is a jump server?
Atsakymas
A hardened intermediary used to reach systems in a restricted management network.
309 kortelė
Klausimas
What can happen when a configuration change is made without dependency analysis?
Atsakymas
A downstream service can fail even when the changed component works.
310 kortelė
Klausimas
What is resource reuse exposure?
Atsakymas
Sensitive data from a previous use remains accessible when storage or memory is reassigned.
311 kortelė
Klausimas
Why does financial information require explicit protection?
Atsakymas
It can expose accounts, transactions, forecasts, or reporting and may create fraud, legal, or business risk if altered or disclosed.
312 kortelė
Klausimas
What does CVE provide?
Atsakymas
A common identifier for a publicly disclosed vulnerability.
313 kortelė
Klausimas
Where can DLP controls operate?
Atsakymas
On endpoints, networks, email, and cloud services, depending on the product and visibility.
314 kortelė
Klausimas
What does privileged password vaulting protect?
Atsakymas
It stores and controls use of privileged secrets so users or automation do not need to know or retain the underlying password.
315 kortelė
Klausimas
What does an access-control standard define?
Atsakymas
Mandatory, measurable requirements for identity, authentication, authorization, review, and removal of access.
316 kortelė
Klausimas
How can automation support compliance monitoring?
Atsakymas
It can collect evidence, test controls, flag exceptions, and produce repeatable reports, with human review of context.
317 kortelė
Klausimas
What does static code analysis examine?
Atsakymas
Source or compiled code for weakness patterns without executing the application.
318 kortelė
Klausimas
What actor attribute describes funding, time, and personnel?
Atsakymas
Resources.
319 kortelė
Klausimas
What is DNS poisoning?
Atsakymas
Introducing false DNS data so names resolve to attacker-chosen destinations.
320 kortelė
Klausimas
Why change default credentials during hardening?
Atsakymas
Default secrets are predictable and commonly targeted.
321 kortelė
Klausimas
What does quarantine do after a security alert?
Atsakymas
It restricts a suspected asset or object while analysts validate and remediate the risk.
322 kortelė
Klausimas
What does key stretching do for stored passwords?
Atsakymas
It deliberately makes each password guess more computationally expensive.
323 kortelė
Klausimas
What is smishing?
Atsakymas
Phishing delivered through SMS or another text-messaging service.
324 kortelė
Klausimas
What is qualitative risk analysis?
Atsakymas
Using descriptive scales such as low, medium, and high to compare likelihood and impact.
325 kortelė
Klausimas
What is a master service agreement?
Atsakymas
An umbrella contract establishing general legal and commercial terms for ongoing work.
326 kortelė
Klausimas
What is threat scope reduction?
Atsakymas
Narrowing the systems, privileges, or paths an attacker can reach.
327 kortelė
Klausimas
Why use a third-party cloud service instead of building locally?
Atsakymas
It can provide faster deployment, elasticity, and managed capabilities, with added dependency and governance risk.
328 kortelė
Klausimas
What should determine security-device placement?
Atsakymas
The traffic or resource to observe or enforce, the trust boundary, failure behavior, reachability, and resilience needs.
329 kortelė
Klausimas
What does situational awareness mean for a user?
Atsakymas
Notice the people, devices, requests, location, and context around a task before acting.
330 kortelė
Klausimas
What does a failover test validate?
Atsakymas
That the service can transfer to the alternate component or site within the required recovery targets under the tested conditions.
331 kortelė
Klausimas
What is a preventive control meant to do?
Atsakymas
Stop an unwanted event before it succeeds.
332 kortelė
Klausimas
What is just-in-time privileged access?
Atsakymas
Elevated access is granted only when needed and expires after a short approved period.
333 kortelė
Klausimas
What safeguard should security-group automation enforce?
Atsakymas
Least-privileged rules tied to an approved resource, owner, purpose, and review or expiration point.
334 kortelė
Klausimas
How does a reflected DDoS attack hide and multiply sources?
Atsakymas
The attacker spoofs the victim's address so many third-party services send their replies to the victim.
335 kortelė
Klausimas
What is a security misconfiguration?
Atsakymas
An unsafe setting, such as public storage, default access, or excessive permissions, that exposes a resource.
336 kortelė
Klausimas
Why can the same vulnerability have different organizational impact?
Atsakymas
Industry obligations, business processes, safety needs, data sensitivity, and asset criticality change the consequence of exploitation.
337 kortelė
Klausimas
What does URL scanning evaluate before a user opens a web destination?
Atsakymas
The address, redirect chain, reputation, category, and known threat indicators associated with the destination.
338 kortelė
Klausimas
What is the board's security governance role?
Atsakymas
Provide oversight, set risk direction, and hold executives accountable.
339 kortelė
Klausimas
What does code signing establish?
Atsakymas
That code came from the holder of the signing key and has not changed since signing.
340 kortelė
Klausimas
How should an asset's classification affect security operations?
Atsakymas
It should drive handling, access, monitoring, recovery, and disposal controls that match the asset's sensitivity and impact.
341 kortelė
Klausimas
How does encryption protect data?
Atsakymas
It uses a cryptographic key to transform plaintext into ciphertext, which authorized parties can decrypt with the required key while unauthorized readers cannot feasibly recover the original data.
342 kortelė
Klausimas
What is a secure enclave?
Atsakymas
A hardware-isolated execution area intended to protect selected code and data from the rest of the system.
343 kortelė
Klausimas
What is business email compromise?
Atsakymas
Impersonation or takeover of a business identity to induce a fraudulent action, often a payment or data release.
344 kortelė
Klausimas
What is recovery in incident response?
Atsakymas
Restoring services safely, monitoring them, and returning to normal operations.
345 kortelė
Klausimas
How is single loss expectancy commonly estimated?
Atsakymas
Asset value multiplied by the exposure factor.
346 kortelė
Klausimas
What does an unknown penetration-test environment provide?
Atsakymas
The tester begins with little or no internal information, modeling an external attacker's discovery process.
347 kortelė
Klausimas
What security boundary does a hypervisor provide?
Atsakymas
It isolates virtual machines while controlling their access to shared hardware.
348 kortelė
Klausimas
Why does a TLS tunnel not protect a compromised endpoint?
Atsakymas
TLS protects data between endpoints; malware or misuse at either endpoint can access the data before encryption or after decryption.
349 kortelė
Klausimas
Why update diagrams after an infrastructure change?
Atsakymas
Operations and incident responders need the documentation to match the deployed environment.
350 kortelė
Klausimas
What does privacy ownership assign?
Atsakymas
An accountable role for privacy decisions, obligations, data inventory, and corrective action.
351 kortelė
Klausimas
What does a security control gap analysis compare?
Atsakymas
The controls required for the target state with the controls currently in place.
352 kortelė
Klausimas
Someone outside the organization steals an employee's VPN credentials and logs in. Is the actor internal or external?
Atsakymas
External. Stolen internal credentials provide access but do not change the outsider's relationship to the organization.
353 kortelė
Klausimas
What is application privilege escalation?
Atsakymas
Exploiting a flaw or misconfiguration to gain permissions beyond those originally granted.
354 kortelė
Klausimas
What risk remains when unnecessary software is left installed?
Atsakymas
Its code, services, dependencies, and privileges add attack surface even when users do not need it.
355 kortelė
Klausimas
What does SCAP standardize?
Atsakymas
Formats and identifiers for expressing, checking, and scoring security configuration and vulnerability information.
356 kortelė
Klausimas
What can packet capture reveal?
Atsakymas
Protocol-level conversation details and payloads when traffic is not encrypted and collection is authorized.
357 kortelė
Klausimas
What makes a privileged credential ephemeral?
Atsakymas
It is created for a limited task or session and expires or is destroyed automatically after that use.
358 kortelė
Klausimas
How do a statement of work and a work order differ?
Atsakymas
A statement of work defines scope, deliverables, schedule, and responsibilities; a work order authorizes a defined unit of work under an agreement.
359 kortelė
Klausimas
Why might multi-cloud improve resilience?
Atsakymas
A provider-wide failure need not stop workloads that can run independently elsewhere.
360 kortelė
Klausimas
How can a service provider introduce a supply-chain vulnerability?
Atsakymas
Its privileged access, hosted service, or compromised integration can expose customers that depend on it.
361 kortelė
Klausimas
What is a false positive in vulnerability scanning?
Atsakymas
A reported weakness that is not actually present or exploitable in the assessed context.
362 kortelė
Klausimas
How do EDR and XDR differ?
Atsakymas
EDR focuses on endpoint telemetry and response; XDR correlates detection and response across endpoints and other security domains.
363 kortelė
Klausimas
What should onboarding and offboarding procedures coordinate?
Atsakymas
Identity, access, equipment, data, training, approvals, and ownership changes at the start or end of a relationship.
364 kortelė
Klausimas
How should an organization harden managed mobile devices?
Atsakymas
Enforce an MDM baseline with timely updates, screen lock and encryption, least privilege, approved apps, and remote lock or wipe.
365 kortelė
Klausimas
What is a certificate signing request?
Atsakymas
A request containing a public key and subject information for a certificate authority to sign.
366 kortelė
Klausimas
What is pretexting?
Atsakymas
Using a fabricated role or situation to make a request seem legitimate.
367 kortelė
Klausimas
How is annualized loss expectancy commonly estimated?
Atsakymas
Single loss expectancy multiplied by annualized rate of occurrence.
368 kortelė
Klausimas
What security consequence follows from containers sharing a kernel?
Atsakymas
A host-kernel compromise can affect multiple containers, so kernel and runtime hardening matter.
369 kortelė
Klausimas
Where does 802.1X enforce a network admission decision?
Atsakymas
At the controlled switch port or wireless access point before normal network access is granted.
370 kortelė
Klausimas
What should insider-threat awareness teach?
Atsakymas
Recognize misuse or concerning behavior without profiling people, and report evidence through approved channels.
371 kortelė
Klausimas
What access action is suitable for careful automation?
Atsakymas
Enabling or disabling a defined service or account from an approved lifecycle or incident event.
372 kortelė
Klausimas
What is an evil twin?
Atsakymas
A rogue wireless network made to resemble a legitimate one so users connect to it.
744 kortelės
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Mokytis iš šio rinkinio nemokamaiAtsidarys Nibomo ir galėsite pradėti mokytis.
373 kortelė
Klausimas
Does non-human-readable data need less protection?
Atsakymas
No. Encoded or machine-readable data can carry the same sensitive meaning and impact.
374 kortelė
Klausimas
What does authenticating a system establish?
Atsakymas
It verifies a presented authenticator or credential bound to the claimed device, workload, or service identity. Identity proofing or enrollment establishes what real-world entity that identity represents.
375 kortelė
Klausimas
What does LDAP provide in identity systems?
Atsakymas
A standard protocol for querying and modifying directory entries such as users, groups, and attributes.
376 kortelė
Klausimas
What is a deterrent control meant to do?
Atsakymas
Discourage an attacker from attempting an unwanted action.
377 kortelė
Klausimas
Why update procedures after changing a security control?
Atsakymas
Staff need accurate steps for operating, monitoring, and recovering the new control.
378 kortelė
Klausimas
How does OCSP differ from a certificate revocation list?
Atsakymas
OCSP returns status for a specific certificate, while a revocation list distributes a signed set of revoked certificate serial numbers.
379 kortelė
Klausimas
What is the goal of data exfiltration?
Atsakymas
Remove data from its authorized environment without permission.
380 kortelė
Klausimas
What is a watering-hole attack?
Atsakymas
Compromising a site frequented by the intended targets so their visits expose them.
381 kortelė
Klausimas
How can a hardware provider introduce a supply-chain vulnerability?
Atsakymas
A compromised component, firmware image, manufacturing step, or delivery path can weaken the device before deployment.
382 kortelė
Klausimas
What is application forgery?
Atsakymas
Creating or altering a request, token, or object so the application treats it as authentic.
383 kortelė
Klausimas
How does least privilege mitigate compromise?
Atsakymas
It limits the actions and resources available to a compromised account or process.
384 kortelė
Klausimas
What is serverless computing?
Atsakymas
A model where the provider manages servers and the customer deploys event-driven code or functions.
385 kortelė
Klausimas
What makes an infrastructure control effective for a specific risk?
Atsakymas
Its placement, failure behavior, visibility, enforcement scope, and operating cost match the protected path and threat.
386 kortelė
Klausimas
What does parallel recovery processing test?
Atsakymas
Whether primary and alternate environments can run together consistently before a controlled cutover.
387 kortelė
Klausimas
Which password-authentication method does WPA3-Personal use?
Atsakymas
Simultaneous Authentication of Equals, which replaces WPA2-Personal's PSK authentication and resists offline password guessing.
388 kortelė
Klausimas
How does data retention affect asset disposal?
Atsakymas
Required data must be preserved for its retention period, while expired data should be sanitized before reuse or destruction.
389 kortelė
Klausimas
What is a false negative in vulnerability scanning?
Atsakymas
A real weakness that the assessment fails to report.
390 kortelė
Klausimas
What does recurring security scanning add to monitoring?
Atsakymas
Periodic discovery of exposed services, missing fixes, weak configurations, or other detectable changes.
391 kortelė
Klausimas
What should guide port selection for a secure protocol?
Atsakymas
Use the documented service port or an explicitly managed alternative, and expose it only on the required interfaces and paths.
392 kortelė
Klausimas
What does forensic acquisition create?
Atsakymas
A controlled, documented copy or collection of relevant evidence while preserving its integrity and context.
393 kortelė
Klausimas
How do system owners and data owners divide security accountability?
Atsakymas
A system owner is accountable for the system's risk, access, operation, and lifecycle; a data owner sets the data's classification, access, handling, and retention requirements.
394 kortelė
Klausimas
What does likelihood express in risk analysis?
Atsakymas
A reasoned estimate of how plausible or frequent an event is, often stated qualitatively when precise probability is unavailable.
395 kortelė
Klausimas
What is a memorandum of understanding?
Atsakymas
A documented understanding of intentions and responsibilities, whose legal effect depends on its terms and jurisdiction.
396 kortelė
Klausimas
What does the right to be forgotten generally require?
Atsakymas
Deletion of qualifying personal data when the applicable law grants the right and no overriding retention duty applies.
397 kortelė
Klausimas
What does an audit committee oversee?
Atsakymas
Audit independence, plans, significant findings, management responses, and corrective-action follow-through.
398 kortelė
Klausimas
What does identity interoperability require?
Atsakymas
Compatible protocols, attribute meanings, trust, and lifecycle behavior across connected systems.
399 kortelė
Klausimas
How does a bollard protect a facility?
Atsakymas
It blocks or redirects vehicles before they can reach a protected area.
400 kortelė
Klausimas
How can hashing protect a downloaded file?
Atsakymas
A trusted digest lets the recipient detect whether the file changed.
401 kortelė
Klausimas
What is a credential replay attack?
Atsakymas
Using captured valid credentials or tokens again without needing to discover the secret.
402 kortelė
Klausimas
How can automation complexity create security risk?
Atsakymas
Hidden dependencies and branching behavior can make failures difficult to predict, diagnose, contain, or reverse.
403 kortelė
Klausimas
What must an architecture provide when a component cannot be patched?
Atsakymas
Compensating isolation, restricted access, monitoring, and a replacement plan that reduce exposure until the component can be retired.
404 kortelė
Klausimas
What makes remote access secure?
Atsakymas
Controlled, authenticated, encrypted access to a private resource from outside its local trusted network.
405 kortelė
Klausimas
What should users verify before connecting removable media or a cable?
Atsakymas
That the device and connection are approved, expected, and handled under organizational policy.
406 kortelė
Klausimas
What is a self-signed certificate?
Atsakymas
A certificate signed by its own private key rather than by a separate trusted issuer.
407 kortelė
Klausimas
What is brand impersonation?
Atsakymas
Using a trusted organization's identity or look to deceive people.
408 kortelė
Klausimas
What characterizes a conservative risk appetite?
Atsakymas
A preference for lower uncertainty and exposure, even when that limits speed, return, or opportunity.
409 kortelė
Klausimas
What should a managed mobile device verify before using Wi-Fi?
Atsakymas
The expected network identity, strong encryption, trusted authentication, and policy compliance before sending sensitive traffic.
410 kortelė
Klausimas
What is a zero-day vulnerability?
Atsakymas
A flaw previously unknown to the vendor or defenders, or one without an available fix when discovered. A zero-day exploit is code or a technique that attacks such a flaw.
411 kortelė
Klausimas
What does verification confirm after vulnerability remediation?
Atsakymas
Retesting confirms that the remediation removed or reduced the finding as intended within the tested scope.
412 kortelė
Klausimas
What is user and entity behavior analytics?
Atsakymas
Analysis that identifies deviations from expected behavior for users, accounts, hosts, or services.
413 kortelė
Klausimas
What does a physical security policy establish?
Atsakymas
Required protection for facilities, people, equipment, entry, monitoring, and response to physical events.
414 kortelė
Klausimas
What does a UPS provide?
Atsakymas
Immediate short-term power and power conditioning while systems shut down or alternate power starts.
415 kortelė
Klausimas
What is a nondisclosure agreement?
Atsakymas
A contract restricting use and disclosure of defined confidential information.
416 kortelė
Klausimas
What should be checked before assigning a user permission?
Atsakymas
The user's approved duties, the resource and action allowed, separation-of-duties conflicts, and the impact if the permission is misused.
417 kortelė
Klausimas
How does espionage differ from ordinary theft?
Atsakymas
It seeks confidential intelligence for strategic advantage, often while remaining hidden.
418 kortelė
Klausimas
What is password spraying?
Atsakymas
Trying a small set of common passwords across many accounts to avoid lockouts.
419 kortelė
Klausimas
What is the purpose of system isolation during an incident?
Atsakymas
Stop harmful communication while preserving the system for response and investigation.
420 kortelė
Klausimas
What is a security benchmark?
Atsakymas
A documented set of recommended configuration checks for a platform or product.
421 kortelė
Klausimas
Which metadata fields give a log record investigative context?
Atsakymas
Fields such as timestamp and time zone, source system, user or process identity, event ID or type, severity, and correlation ID.
422 kortelė
Klausimas
What does an access-control vestibule prevent?
Atsakymas
It limits tailgating by allowing controlled passage through one door at a time.
423 kortelė
Klausimas
What is version control's security value for configuration?
Atsakymas
It preserves attributable history and enables review or rollback of changes.
424 kortelė
Klausimas
Why use both internal and external compliance monitoring?
Atsakymas
Internal monitoring supports continuous correction; external review adds independent or regulatory scrutiny.
425 kortelė
Klausimas
What distinguishes on-premises architecture?
Atsakymas
The organization operates the infrastructure in facilities it controls and retains the associated physical and platform duties.
426 kortelė
Klausimas
What risk can split tunneling add to a VPN?
Atsakymas
The endpoint can reach the protected network and an untrusted network at the same time, creating a path around centralized inspection.
427 kortelė
Klausimas
What is a certificate root of trust?
Atsakymas
A trusted root certificate or key from which a client validates a certificate chain.
428 kortelė
Klausimas
What is typosquatting?
Atsakymas
Registering a look-alike domain based on common typing errors or visual similarity.
429 kortelė
Klausimas
What is root-cause analysis?
Atsakymas
Identifying the underlying conditions that allowed an incident, not just its visible symptoms.
430 kortelė
Klausimas
What is risk tolerance?
Atsakymas
The acceptable variation or boundary around a specific objective or risk area.
431 kortelė
Klausimas
What is a security self-assessment?
Atsakymas
A structured internal evaluation in which the organization measures its own controls against selected criteria.
432 kortelė
Klausimas
What does data masking change?
Atsakymas
It replaces sensitive values with altered but usable representations, often preserving format for testing or display.
433 kortelė
Klausimas
How do wireless authentication protocols let clients prove identity securely?
Atsakymas
They define how a client proves control of a credential, such as a password-derived secret or a certificate's private key; stronger choices also validate the server and protect the exchange.
434 kortelė
Klausimas
Why reconcile inventory with network discovery?
Atsakymas
Differences expose missing records, retired systems, or unauthorized devices.
435 kortelė
Klausimas
Why does sideloading raise mobile risk?
Atsakymas
It can bypass store review, signing policy, and managed application controls.
436 kortelė
Klausimas
What does an information-sharing organization add to vulnerability management?
Atsakymas
Sector or community intelligence about relevant threats, incidents, and defensive action.
437 kortelė
Klausimas
What does a web-filter block rule specify?
Atsakymas
The URL, domain, category, reputation, content, user, or context that should prevent a web request.
438 kortelė
Klausimas
How do data custodians and data stewards differ?
Atsakymas
Custodians implement and operate technical safeguards for data; stewards guide its definitions, quality, handling, and proper use under the owner’s direction.
439 kortelė
Klausimas
What is a brute-force password attack?
Atsakymas
Systematically trying many candidate secrets against an account or protected value.
440 kortelė
Klausimas
What is a compensating control?
Atsakymas
An alternative safeguard used when the preferred control is impractical or unavailable.
441 kortelė
Klausimas
How can location act as an authentication factor?
Atsakymas
A system can evaluate where the claimant is, but location signals are usually contextual and spoofable rather than sufficient alone.
442 kortelė
Klausimas
Why must security automation remain supportable?
Atsakymas
Owners must be able to update dependencies, understand failures, rotate credentials, and adapt the workflow as systems change.
443 kortelė
Klausimas
What does a standby generator provide?
Atsakymas
Longer-duration power during a utility outage, after a startup delay.
444 kortelė
Klausimas
What makes an architecture air-gapped?
Atsakymas
It has no direct network path to less-trusted networks, although removable media and maintenance workflows can still cross the boundary.
445 kortelė
Klausimas
What is a software-defined WAN?
Atsakymas
A centrally managed overlay that selects wide-area paths by policy across underlying network links.
446 kortelė
Klausimas
What password-management behavior should awareness training reinforce?
Atsakymas
Use unique long passwords through an approved manager and report suspected compromise promptly.
447 kortelė
Klausimas
What security value does fencing provide?
Atsakymas
It defines and delays entry across a physical perimeter.
448 kortelė
Klausimas
What is a wildcard certificate?
Atsakymas
A certificate that can match multiple hosts at one domain level, such as subdomains of an example domain.
449 kortelė
Klausimas
How does misinformation differ from disinformation?
Atsakymas
Misinformation is false regardless of intent; disinformation is deliberately false or misleading.
450 kortelė
Klausimas
What is a risk threshold?
Atsakymas
A defined level that triggers escalation, treatment, or another required response.
451 kortelė
Klausimas
What does a vendor penetration test contribute to assessment?
Atsakymas
Authorized evidence of exploitable paths in the vendor's relevant environment under agreed scope.
452 kortelė
Klausimas
What is the objective of a service-disruption attack?
Atsakymas
Make a system or business function unavailable or unreliable.
453 kortelė
Klausimas
What is directory traversal?
Atsakymas
Manipulating a file path to reach files outside the directory the application intended to expose.
454 kortelė
Klausimas
Why decommission an unsupported system?
Atsakymas
Removing it eliminates an exposure that can no longer be patched or securely maintained.
455 kortelė
Klausimas
Why archive security-monitoring data?
Atsakymas
To preserve evidence for investigations, trend analysis, compliance, and retention requirements beyond the live system.
456 kortelė
Klausimas
What role does RADIUS commonly play in enterprise Wi-Fi?
Atsakymas
It centralizes authentication, authorization information, and accounting for network access.
457 kortelė
Klausimas
Why separate the requester and approver of a high-risk change?
Atsakymas
To reduce error, fraud, and unilateral unauthorized modification.
458 kortelė
Klausimas
Why can a jailbroken device violate a security baseline?
Atsakymas
It weakens platform isolation and allows unapproved privileged changes.
459 kortelė
Klausimas
When is tokenization especially useful?
Atsakymas
When a system needs a surrogate value without retaining the original sensitive value in that workflow.
460 kortelė
Klausimas
Why can dark-web intelligence affect vulnerability priority?
Atsakymas
Discussion, exploit sales, or leaked access can signal attacker interest, but the evidence must be validated.
461 kortelė
Klausimas
What firewall policy should govern traffic from a screened subnet to internal systems?
Atsakymas
Deny it by default and allow only explicitly required flows.
462 kortelė
Klausimas
What does SAML commonly carry?
Atsakymas
XML assertions about authentication and attributes between an identity provider and service provider; signatures commonly protect their authenticity and integrity.
463 kortelė
Klausimas
What does a security governance committee do?
Atsakymas
It coordinates stakeholders, reviews risk and performance, and makes or recommends decisions within its charter.
464 kortelė
Klausimas
How can global privacy requirements affect one data process?
Atsakymas
A shared process may need to satisfy overlapping duties across jurisdictions where people, systems, or data are located.
465 kortelė
Klausimas
What characterizes an IoT device?
Atsakymas
It combines sensing or actuation with network connectivity, often under tight resource and update constraints.
466 kortelė
Klausimas
What is a unified threat management appliance?
Atsakymas
One device combines several controls, such as firewalling, intrusion prevention, filtering, and malware inspection.
467 kortelė
Klausimas
What does a hardware security module provide?
Atsakymas
A dedicated, tamper-resistant environment for generating, storing, and using cryptographic keys.
468 kortelė
Klausimas
A remotely reachable API is fixed, but its desktop client stays vulnerable. What exposure remains?
Atsakymas
Client-based exposure remains because the installed endpoint software is still vulnerable; fixing the remote API does not remediate the client.
469 kortelė
Klausimas
What is a tabletop exercise?
Atsakymas
A discussion-based walkthrough of a scenario to test decisions, roles, and procedures.
470 kortelė
Klausimas
What does a risk exemption authorize?
Atsakymas
A documented release from a requirement for a defined scope, owner, rationale, controls, review, and expiration.
471 kortelė
Klausimas
What is a regulatory examination?
Atsakymas
An authorized regulator reviews records, controls, and practices to determine whether the organization meets applicable requirements.
472 kortelė
Klausimas
What does physical video surveillance primarily provide?
Atsakymas
Detection and evidence of activity in monitored areas.
473 kortelė
Klausimas
What is a birthday attack against a hash?
Atsakymas
Using collision probability to find any two matching digests much faster than targeting one exact preimage.
474 kortelė
Klausimas
Why keep backups both onsite and offsite?
Atsakymas
Onsite copies support fast recovery, while offsite copies survive a site-wide loss.
475 kortelė
Klausimas
How does technical debt affect security automation?
Atsakymas
Outdated assumptions, dependencies, and workarounds make the workflow harder to change and more likely to fail unsafely.
476 kortelė
Klausimas
What should switch hardening restrict first?
Atsakymas
Administrative access, unused ports, insecure management protocols, and unauthorized changes to switching configuration.
477 kortelė
Klausimas
What should happen when an asset changes owners?
Atsakymas
Inventory, access, support responsibility, and data handling should be updated.
478 kortelė
Klausimas
What does evidence of a vendor's internal audits contribute?
Atsakymas
It shows how the vendor tests its own controls, records findings, assigns remediation, and follows issues to closure.
479 kortelė
Klausimas
What is identity attestation?
Atsakymas
Evidence that an identity, device, authenticator, or claim has been verified by a trusted process.
480 kortelė
Klausimas
Why can standard enterprise patching be unsafe for an RTOS device?
Atsakymas
A change can disrupt timing guarantees or certified operational behavior.
481 kortelė
Klausimas
What is secure access service edge?
Atsakymas
A cloud-delivered architecture that combines wide-area connectivity with policy-driven security services near users and resources.
482 kortelė
Klausimas
What social-engineering habit should awareness training reinforce?
Atsakymas
Pause and independently verify unusual requests instead of trusting urgency, authority, or familiarity.
483 kortelė
Klausimas
How can a software provider introduce a supply-chain vulnerability?
Atsakymas
A compromised package, build system, dependency, or update channel can deliver vulnerable or malicious code to customers.
484 kortelė
Klausimas
Why include internet exposure in remediation priority?
Atsakymas
A reachable vulnerable service usually has more attack opportunity than an isolated one.
485 kortelė
Klausimas
What does a mail gateway inspect?
Atsakymas
Inbound and outbound email for threats, policy violations, spoofing, and sensitive data.
486 kortelė
Klausimas
What is a data controller?
Atsakymas
The entity that determines why and how personal data is processed.
487 kortelė
Klausimas
How does blackmail motivate a cyberattack?
Atsakymas
The attacker threatens disclosure or harm unless the victim complies.
488 kortelė
Klausimas
What is a downgrade attack?
Atsakymas
Forcing parties to use an older or weaker protocol or security mode.
489 kortelė
Klausimas
How does encryption mitigate data exposure?
Atsakymas
It makes captured data unreadable without the required key.
490 kortelė
Klausimas
How do network and web vulnerability scanners differ?
Atsakymas
Network scanners assess reachable hosts, services, versions, and configurations; web scanners exercise running web behavior for application weaknesses.
491 kortelė
Klausimas
How can vulnerability-scan data support an investigation?
Atsakymas
It shows which weaknesses, versions, services, and exposures were known on the affected systems near the incident timeline.
492 kortelė
Klausimas
What is key escrow?
Atsakymas
Controlled storage of a recoverable copy of a cryptographic key by an authorized party.
493 kortelė
Klausimas
Which human vector commonly uses a fake sign-in page to harvest credentials?
Atsakymas
Phishing; the message sends the target to an imitation service that captures the submitted credentials.
494 kortelė
Klausimas
What is risk avoidance?
Atsakymas
Stopping or not starting the activity that creates the risk.
495 kortelė
Klausimas
What is data obfuscation?
Atsakymas
Making data harder to understand while preserving some utility, without necessarily providing cryptographic secrecy.
496 kortelė
Klausimas
What is a directive control?
Atsakymas
A safeguard that tells people what behavior or action is required.
497 kortelė
Klausimas
What does a security guard add that a camera cannot?
Atsakymas
Human judgment and an immediate physical response.
498 kortelė
Klausimas
Why define restricted activities in change management?
Atsakymas
High-risk actions can then require extra authorization, separation of duties, or a prohibited window.
499 kortelė
Klausimas
What contractual impact can noncompliance create?
Atsakymas
It can trigger remediation duties, service credits, indemnity, audit rights, suspension, termination, or claims for breach.
500 kortelė
Klausimas
What should determine backup frequency?
Atsakymas
The recovery point objective, data-change rate, business impact, and available replication or storage capacity.
501 kortelė
Klausimas
What should router hardening protect?
Atsakymas
Administrative access, routing configuration, exposed services, and the integrity of traffic-control policy.
502 kortelė
Klausimas
What problem does OAuth 2.0 address?
Atsakymas
Delegated authorization: a client obtains limited access to a resource without receiving the user's password.
503 kortelė
Klausimas
What does SCADA do?
Atsakymas
It provides supervisory monitoring and control across distributed industrial equipment.
504 kortelė
Klausimas
How does a Layer 3/4 firewall rule differ from a Layer 7 rule?
Atsakymas
Layer 3/4 evaluates IP addresses plus transport protocols and ports; Layer 7 evaluates application content or actions.
505 kortelė
Klausimas
What distinguishes a computer virus?
Atsakymas
It attaches to a host file or program and spreads when that infected host executes or is shared.
506 kortelė
Klausimas
What does a key management system coordinate?
Atsakymas
Secure key creation, storage, access, rotation, revocation, recovery, and destruction.
507 kortelė
Klausimas
How can an unsecure wired network expose traffic?
Atsakymas
An unauthorized device on the network may observe, redirect, or inject traffic when access control and link protections are weak.
508 kortelė
Klausimas
Why is vulnerable device firmware hard to remediate?
Atsakymas
Firmware updates may be rare, vendor-dependent, or impossible after support ends.
509 kortelė
Klausimas
What does patching change in vulnerability remediation?
Atsakymas
It installs the vendor's corrected code or configuration to remove the underlying software weakness.
510 kortelė
Klausimas
What does DMARC add to SPF and DKIM?
Atsakymas
Domain alignment, receiver policy, and reporting for messages claiming the visible From domain.
511 kortelė
Klausimas
How does automation improve security efficiency?
Atsakymas
It performs repeatable actions quickly and consistently while reducing manual handoffs and rework.
512 kortelė
Klausimas
What is a simulation exercise?
Atsakymas
A more realistic practice in which participants respond to injected events using operational processes.
513 kortelė
Klausimas
What is a data processor?
Atsakymas
An entity that processes personal data on behalf of a controller.
514 kortelė
Klausimas
What is risk mitigation?
Atsakymas
Reducing likelihood, impact, or both through controls or process changes.
515 kortelė
Klausimas
Why monitor a vendor after onboarding?
Atsakymas
Security posture, ownership, services, incidents, and dependencies can change.
516 kortelė
Klausimas
What does a physical penetration test assess?
Atsakymas
Whether authorized testers can bypass facility, personnel, and physical access controls under agreed rules.
517 kortelė
Klausimas
Why use access badges at a facility?
Atsakymas
To associate entry attempts with authorized identities and enforce access rules.
518 kortelė
Klausimas
How does permission restriction protect data?
Atsakymas
Only authorized identities receive the actions and scope their roles require.
519 kortelė
Klausimas
What is the usual objective of ransomware extortion?
Atsakymas
Force payment by denying access, threatening disclosure, or both.
520 kortelė
Klausimas
What does impossible travel indicate?
Atsakymas
One identity appears to authenticate from distant locations too quickly for legitimate travel.
521 kortelė
Klausimas
What is configuration enforcement?
Atsakymas
Continuously applying or restoring approved settings so systems do not remain in an insecure state.
522 kortelė
Klausimas
What does a web vulnerability scanner inspect?
Atsakymas
Running web behavior for issues such as unsafe input handling and insecure configuration.
523 kortelė
Klausimas
How does cost affect an architecture choice?
Atsakymas
It constrains acquisition, operation, staffing, resilience, and recovery options across the system's life.
524 kortelė
Klausimas
What does EAP provide with 802.1X?
Atsakymas
A framework for carrying an authentication method between the supplicant and authentication infrastructure.
525 kortelė
Klausimas
What should operational-security training help users protect?
Atsakymas
Sensitive routines, capabilities, locations, relationships, and small details that an observer could combine into useful intelligence.
526 kortelė
Klausimas
What does a time-of-day access rule do?
Atsakymas
Allows or denies a requested action according to an approved schedule.
527 kortelė
Klausimas
What should cloud infrastructure hardening establish?
Atsakymas
Secure identities, network boundaries, logging, encryption, approved configurations, and continuous checks for drift.
528 kortelė
Klausimas
What should an asset owner ensure during offboarding?
Atsakymas
Assigned assets, access, data, and custody records are returned, transferred, or disposed of under the approved process.
529 kortelė
Klausimas
Why encrypt backups?
Atsakymas
Backup media and transfers can expose the same sensitive data as production systems.
530 kortelė
Klausimas
What is steganography?
Atsakymas
Hiding the existence of data inside another medium rather than merely encrypting its contents.
531 kortelė
Klausimas
Which human vector uses a fabricated authority role to justify a sensitive request?
Atsakymas
Pretexting; the attacker invents a credible role and situation to make the request seem legitimate.
532 kortelė
Klausimas
Why does risk transfer not remove accountability?
Atsakymas
The organization can retain legal, reputational, operational, and oversight consequences.
533 kortelė
Klausimas
Why validate a change after deployment?
Atsakymas
To confirm the intended result occurred without introducing unacceptable side effects.
534 kortelė
Klausimas
What makes end-of-life hardware a security vulnerability?
Atsakymas
The vendor no longer supplies fixes or support, so known weaknesses can persist without a reliable remediation path.
535 kortelė
Klausimas
What does an audit add to remediation validation?
Atsakymas
Independent evidence that the approved fix, process, and documentation were completed and remain effective.
536 kortelė
Klausimas
Why can SPF pass while a message still impersonates a brand?
Atsakymas
SPF checks the envelope domain, which may differ from the visible From domain.
537 kortelė
Klausimas
What role can a government entity have in security governance?
Atsakymas
It can establish, enforce, or oversee legal and regulatory requirements within its authority.
538 kortelė
Klausimas
How do data inventory and retention support privacy governance?
Atsakymas
The inventory records what data is processed and where; retention rules define how long it is kept and when it is deleted or anonymized.
539 kortelė
Klausimas
What can concurrent sessions from distant regions indicate?
Atsakymas
A stolen account or shared credential, subject to VPN and proxy context.
540 kortelė
Klausimas
What does supply-chain analysis examine?
Atsakymas
Upstream providers, components, dependencies, concentration, and compromise paths that can affect the purchased service.
541 kortelė
Klausimas
What is the purpose of facility lighting as a control?
Atsakymas
Deter covert activity and improve observation of people and areas.
542 kortelė
Klausimas
What architecture quality keeps a service usable during component failure?
Atsakymas
Availability.
543 kortelė
Klausimas
When is fail-open behavior preferable to fail-closed behavior?
Atsakymas
When preserving availability during control failure is more important than blocking uninspected traffic, based on the system's risk decision.
544 kortelė
Klausimas
Which control function does a login-failure alert provide?
Atsakymas
Detection; it reveals suspicious authentication activity.
545 kortelė
Klausimas
What does a biometric MFA implementation verify?
Atsakymas
A measured physical or behavioral characteristic presented by the user, matched against an enrolled template.
546 kortelė
Klausimas
How can automation enforce a security baseline?
Atsakymas
It compares realized settings with the approved state and reports or corrects unauthorized drift.
547 kortelė
Klausimas
How do wireless cryptographic protocols protect network traffic?
Atsakymas
They encrypt frames over the air and add integrity protection, reducing eavesdropping and tampering when a secure protocol and configuration are used.
548 kortelė
Klausimas
Why segment sensitive data stores?
Atsakymas
It limits reachable paths and separates them from lower-trust workloads.
549 kortelė
Klausimas
What must remain secret in an asymmetric key pair?
Atsakymas
The private key; disclosure lets another party impersonate the owner or decrypt data intended for that key, depending on its use.
550 kortelė
Klausimas
How can a supplier become a supply-chain attack vector?
Atsakymas
A compromised material, component, credential, or delivery process can weaken products before they reach the organization.
551 kortelė
Klausimas
What is e-discovery?
Atsakymas
Identifying, preserving, collecting, reviewing, and producing electronically stored information for a legal matter.
552 kortelė
Klausimas
What characterizes a neutral risk appetite?
Atsakymas
A balanced willingness to accept uncertainty when expected value and controls justify the exposure.
553 kortelė
Klausimas
What is passive reconnaissance?
Atsakymas
Gathering information without directly interacting with the target's systems.
554 kortelė
Klausimas
What does a philosophical motive mean for a threat actor?
Atsakymas
The actor acts to advance a belief or moral position rather than primarily for money.
555 kortelė
Klausimas
What does unexpected resource consumption indicate?
Atsakymas
Possible malware, denial of service, cryptomining, or a malfunction that needs investigation.
556 kortelė
Klausimas
What does a host-based intrusion prevention system do?
Atsakymas
It monitors activity on one host and can block behavior that matches exploit or attack rules.
557 kortelė
Klausimas
How does agent-based monitoring differ from agentless monitoring?
Atsakymas
An agent collects local detail on the host; agentless monitoring uses remote interfaces and may have less visibility.
558 kortelė
Klausimas
What can network logs contribute to an investigation?
Atsakymas
Connection timing, endpoints, protocols, routing, name resolution, and other evidence of communication across the environment.
559 kortelė
Klausimas
What is the purpose of a backup restore test?
Atsakymas
Demonstrate under tested conditions that required data and systems can be recovered within expectations.
560 kortelė
Klausimas
Why can obsolete hardware become a security risk?
Atsakymas
It may lack supported firmware, modern protections, or replacement parts.
561 kortelė
Klausimas
What does rescanning confirm after remediation?
Atsakymas
Whether the scanner can still detect the original finding on the affected asset.
562 kortelė
Klausimas
What should a secure transport method provide?
Atsakymas
Authenticated endpoints where required, confidentiality, integrity, replay resistance, and supported cryptography for the traffic.
563 kortelė
Klausimas
How can law affect security governance?
Atsakymas
It can impose mandatory duties based on jurisdiction, data, industry, or activity.
564 kortelė
Klausimas
What does resilience mean for a security architecture?
Atsakymas
The ability to withstand disruption, adapt, and recover while preserving essential functions.
565 kortelė
Klausimas
Why minimize an infrastructure's attack surface?
Atsakymas
Fewer exposed services and paths leave fewer opportunities for exploitation.
566 kortelė
Klausimas
What does executing a security-awareness program require?
Atsakymas
Delivering the approved content to the intended audiences, tracking participation, handling exceptions, and measuring outcomes.
567 kortelė
Klausimas
What does an infrared security sensor detect?
Atsakymas
A change in infrared energy, often the heat pattern created by a person moving through its field of view.
568 kortelė
Klausimas
What is a knowledge factor?
Atsakymas
Something the claimant knows, such as a password.
569 kortelė
Klausimas
Why review allow-list and deny-list impact before a change?
Atsakymas
Adding or removing an entry can unexpectedly grant access, block users, or interrupt dependencies.
570 kortelė
Klausimas
What does partition-level encryption protect?
Atsakymas
One selected disk partition, leaving other partitions outside that encryption boundary.
571 kortelė
Klausimas
How can instant messaging deliver a security attack?
Atsakymas
It can deliver a malicious link, file, request, or impersonated conversation through a fast, trusted-looking channel.
572 kortelė
Klausimas
What can repeated blocked-content events indicate?
Atsakymas
Malware, policy bypass, a misconfigured application, or a user repeatedly reaching prohibited resources.
573 kortelė
Klausimas
What should a server-hardening baseline reduce?
Atsakymas
Unnecessary services, exposed administration, weak identity controls, insecure defaults, and unmonitored configuration change.
574 kortelė
Klausimas
When is physical media destruction appropriate?
Atsakymas
When reuse is unnecessary or sanitization cannot provide adequate assurance.
575 kortelė
Klausimas
What is mean time to repair?
Atsakymas
The average time required to restore a failed component or service.
576 kortelė
Klausimas
Why disclose conflicts of interest during vendor selection?
Atsakymas
A personal or financial relationship can bias evaluation away from the organization's requirements.
577 kortelė
Klausimas
What is a fine for noncompliance?
Atsakymas
A monetary penalty imposed for failing to meet a legal, regulatory, or contractual requirement.
578 kortelė
Klausimas
What does a public data classification authorize?
Atsakymas
Approved disclosure without confidentiality restrictions, while integrity and availability requirements may still apply.
579 kortelė
Klausimas
What security benefit comes from standard infrastructure configurations?
Atsakymas
They reduce variation, make review repeatable, and let the same approved controls be applied across resources.
580 kortelė
Klausimas
How does horizontal scaling increase capacity?
Atsakymas
It adds more service instances and distributes work among them.
581 kortelė
Klausimas
Why can added connectivity weaken segmentation?
Atsakymas
Each allowed path can become a route for lateral movement or data escape.
582 kortelė
Klausimas
What coding practice is central to preventing SQL injection?
Atsakymas
Use parameterized queries so untrusted values remain data rather than executable query syntax.
583 kortelė
Klausimas
When is a compensating control appropriate for a vulnerability?
Atsakymas
When timely removal or patching is infeasible and another control can reduce the risk.
584 kortelė
Klausimas
How does agent-based web filtering enforce policy?
Atsakymas
Software on the endpoint evaluates or redirects web traffic, including traffic that does not pass through a central network proxy.
585 kortelė
Klausimas
How can regulation differ from an internal policy?
Atsakymas
Regulation is externally enforceable; internal policy is an organizational rule that may implement external duties.
586 kortelė
Klausimas
What is a storage snapshot?
Atsakymas
A point-in-time representation of data or system state, whose independence depends on how it is stored.
587 kortelė
Klausimas
What does password age measure?
Atsakymas
How long the current password has existed, which policy may use to prevent immediate reuse or trigger a risk-based change.
588 kortelė
Klausimas
What does an ethical motive mean in vulnerability research?
Atsakymas
The researcher intends to improve security, typically through authorized testing and responsible disclosure.
589 kortelė
Klausimas
What can missing security logs indicate?
Atsakymas
Logging failure, tampering, retention misconfiguration, or an inactive source.
590 kortelė
Klausimas
Why disable unused ports and protocols?
Atsakymas
They expose unnecessary communication paths and code that attackers can reach.
591 kortelė
Klausimas
What does antivirus contribute to monitoring?
Atsakymas
It scans files, memory, or behavior and reports suspected malicious code.
592 kortelė
Klausimas
What is a honeypot?
Atsakymas
A decoy system or service designed to attract and observe malicious activity.
593 kortelė
Klausimas
What does file-level encryption protect?
Atsakymas
Selected files independently of whether the rest of the disk or volume is encrypted.
594 kortelė
Klausimas
How can SMS deliver a security attack?
Atsakymas
A text message can carry a malicious link or urgent request that exploits the recipient's trust in the phone channel.
595 kortelė
Klausimas
What happens during incident analysis?
Atsakymas
Responders validate the event, determine scope and impact, build a timeline, and identify the systems, accounts, and data involved.
596 kortelė
Klausimas
What is mean time between failures?
Atsakymas
The average operating time between repairable failures.
597 kortelė
Klausimas
What is active reconnaissance?
Atsakymas
Probing or interacting with target systems to discover services and behavior.
598 kortelė
Klausimas
What constraint should guide ICS or SCADA hardening?
Atsakymas
Safety and process availability must be preserved while access, services, network paths, and changes are tightly controlled.
599 kortelė
Klausimas
Which control function does restoring a clean system image provide?
Atsakymas
Correction; it returns the system to a known-good state.
600 kortelė
Klausimas
What does responsiveness mean in an architecture decision?
Atsakymas
How quickly the system and its operators can adapt to demand, failure, or attack.
601 kortelė
Klausimas
How does out-of-band access strengthen remote administration?
Atsakymas
It uses a management path separate from production traffic, preserving controlled access during an outage or compromise.
602 kortelė
Klausimas
What makes user behavior unexpected?
Atsakymas
It differs materially from the person's normal role, timing, location, resource use, or established work pattern.
603 kortelė
Klausimas
What is a work order?
Atsakymas
A document authorizing a defined unit of work under an existing agreement.
604 kortelė
Klausimas
What can out-of-cycle logging indicate?
Atsakymas
Unexpected activity outside a system's normal schedule, including misuse, compromise, or an unplanned job.
605 kortelė
Klausimas
Why update a standard operating procedure after a change?
Atsakymas
It keeps routine work aligned with the new approved state and reduces inconsistent or unsafe execution.
606 kortelė
Klausimas
What coding practice limits cross-site scripting?
Atsakymas
Context-appropriate output encoding, supported by safe templating and input handling.
607 kortelė
Klausimas
What does a restricted data classification indicate?
Atsakymas
Access is tightly limited because unauthorized disclosure, alteration, or loss would create serious harm.
608 kortelė
Klausimas
How does a bug bounty support responsible disclosure?
Atsakymas
It defines eligible systems, rules, reporting, and possible rewards for external researchers.
609 kortelė
Klausimas
What does web-filter content categorization provide?
Atsakymas
A policy label for a site or page based on its subject, function, or risk so access rules can treat categories consistently.
610 kortelė
Klausimas
How do hard and soft authentication tokens differ?
Atsakymas
A hard token is a separate physical device; a soft token is implemented in software on a general-purpose device.
611 kortelė
Klausimas
How can industry requirements affect security governance?
Atsakymas
Industry standards, shared practices, assurance expectations, and sector-specific risks can shape required policies and controls.
612 kortelė
Klausimas
How can noncompliance cause loss of a license?
Atsakymas
An authority may suspend or revoke the permission needed to operate, sell, or perform regulated work.
613 kortelė
Klausimas
What does volume-level encryption protect?
Atsakymas
All data within a selected logical storage volume.
614 kortelė
Klausimas
How can impersonation exploit familiarity?
Atsakymas
The attacker imitates a known person or routine communication style so the request receives less scrutiny.
615 kortelė
Klausimas
How does RTO guide recovery design?
Atsakymas
It sets the target maximum time to restore the function, driving recovery automation, staffing, capacity, and site choices.
616 kortelė
Klausimas
What is a honeynet?
Atsakymas
A network of decoy systems used to study or divert attackers.
617 kortelė
Klausimas
What does backup replication provide?
Atsakymas
Additional synchronized or copied recovery data in another system or location.
618 kortelė
Klausimas
What lets automation scale securely?
Atsakymas
Bounded permissions, validated inputs, rate controls, audit records, and consistent policy at every new resource.
619 kortelė
Klausimas
Why monitor a hardened computing resource continuously?
Atsakymas
New drift, failures, attacks, and unsupported changes can appear after a secure baseline is deployed.
620 kortelė
Klausimas
Why keep a certificate of destruction?
Atsakymas
It documents that a disposal provider handled specified media under the agreed process.
621 kortelė
Klausimas
Why consider patch availability before selecting a platform?
Atsakymas
Unsupported or difficult-to-update components accumulate known exposure.
622 kortelė
Klausimas
Why should remote administration use an encrypted, authenticated protocol?
Atsakymas
It keeps credentials and commands confidential in transit. When correctly configured with integrity protection, the protocol also detects tampering and authenticates the intended endpoint.
623 kortelė
Klausimas
How can revenge motivate an insider incident?
Atsakymas
A disgruntled person may damage systems or disclose data to punish the organization.
624 kortelė
Klausimas
What is a published or documented indicator of malicious activity?
Atsakymas
A malicious observable or behavior—such as a hash, domain, IP address, or TTP—shared through threat intelligence, an advisory, or an incident report to help identify related malicious activity.
625 kortelė
Klausimas
Why monitor a system more closely when a mitigation exception is accepted?
Atsakymas
Monitoring can reveal exploitation or control failure while the documented exception remains open.
626 kortelė
Klausimas
What is an SNMP trap?
Atsakymas
An unsolicited device notification sent to a management system when a configured event occurs.
627 kortelė
Klausimas
How can an automated report support an investigation?
Atsakymas
It assembles repeatable findings, trends, or control results that investigators can correlate with the incident timeline.
628 kortelė
Klausimas
What is a security key?
Atsakymas
A hardware authenticator that uses cryptographic proof, often bound to the legitimate service origin.
629 kortelė
Klausimas
What does database-level encryption protect?
Atsakymas
A database or selected database structures through controls managed at the database layer.
630 kortelė
Klausimas
How does brand impersonation exploit trust?
Atsakymas
It copies a familiar organization's identity so a fraudulent message, site, or account appears legitimate.
631 kortelė
Klausimas
What browser-side impact can a cross-site scripting vulnerability create?
Atsakymas
It can run attacker-controlled script in a trusted site's origin and access data or actions available to the victim's session.
632 kortelė
Klausimas
How can a system or process audit identify vulnerabilities?
Atsakymas
It compares evidence with required configuration and procedure to reveal control gaps.
633 kortelė
Klausimas
What security role can Group Policy provide?
Atsakymas
Centralized Windows configuration of account, application, audit, and system security settings.
634 kortelė
Klausimas
What should incident-response training prepare people to do?
Atsakymas
Recognize their role, use the communication and escalation paths, preserve evidence, and perform approved response actions.
635 kortelė
Klausimas
Why must governance track local or regional requirements?
Atsakymas
They may impose location-specific duties that differ from national, global, industry, or contractual rules.
636 kortelė
Klausimas
How can a dependency become a useful key risk indicator?
Atsakymas
A measurable change in its availability, capacity, control state, or concentration can warn that exposure is increasing.
637 kortelė
Klausimas
What is a business partners agreement?
Atsakymas
An agreement defining how business partners will work together, including responsibilities and security or data-handling terms.
638 kortelė
Klausimas
What makes an audit regulatory?
Atsakymas
It evaluates compliance with requirements established or enforced by a government or delegated authority.
639 kortelė
Klausimas
What is a honeyfile?
Atsakymas
A decoy file whose access can reveal unauthorized activity.
640 kortelė
Klausimas
Why does legal information require explicit protection?
Atsakymas
It may contain privileged advice, case strategy, evidence, or regulated records whose disclosure or alteration creates legal risk.
641 kortelė
Klausimas
Which indicator can mass file renaming and encryption produce?
Atsakymas
Resource inaccessibility; users may be unable to open files after an attacker encrypts or renames them.
642 kortelė
Klausimas
What remains with an organization after transferring architecture risk?
Atsakymas
Oversight and residual risk remain, even when a provider or insurer accepts defined responsibility or financial consequences.
643 kortelė
Klausimas
When does local console placement provide useful administrative access?
Atsakymas
When network management is unavailable or unsafe, a physically controlled console offers a direct recovery path.
644 kortelė
Klausimas
What makes a harmful user action unintentional?
Atsakymas
The user causes exposure or policy violation through error or misunderstanding rather than deliberate misuse.
645 kortelė
Klausimas
How should an organization harden workstations?
Atsakymas
Apply a managed secure baseline: patch the OS and applications, remove unnecessary software and services, enforce least privilege, and enable endpoint protection and a host firewall.
646 kortelė
Klausimas
What is journaling in recovery?
Atsakymas
Recording ordered changes so data can be replayed or restored to a consistent point.
647 kortelė
Klausimas
What downtime must a change plan account for?
Atsakymas
The period when the affected service will be unavailable or degraded, including the impact on users and dependent systems.
648 kortelė
Klausimas
Why must a privacy program map local or regional law to data flows?
Atsakymas
The applicable duties can change with the location of the person, organization, processing, or stored data.
649 kortelė
Klausimas
Why combine independent preventive controls at different layers?
Atsakymas
A failure at one layer does not automatically let the same attack succeed at the next layer.
650 kortelė
Klausimas
What is passwordless authentication?
Atsakymas
A flow that does not require the user to enter a memorized password, often using public-key credentials.
651 kortelė
Klausimas
How can automation improve security reaction time?
Atsakymas
It can collect context and perform preapproved containment or routing as soon as a reliable trigger occurs.
652 kortelė
Klausimas
What does record-level encryption protect?
Atsakymas
Individual records or fields, allowing finer protection than encrypting the entire database.
653 kortelė
Klausimas
How can business email compromise misuse urgency?
Atsakymas
It pressures an employee to bypass normal verification for a payment, credential, or data request.
654 kortelė
Klausimas
What does impact measure in risk analysis?
Atsakymas
The consequence to objectives, such as financial, operational, safety, legal, or reputational harm.
655 kortelė
Klausimas
What makes cyber activity part of warfare?
Atsakymas
It supports military or state conflict objectives such as disruption, intelligence, or influence.
656 kortelė
Klausimas
Which indicator can a newly created privileged account produce outside the normal change window?
Atsakymas
Out-of-cycle logging; the account event appears at a time when no authorized administrative change was scheduled.
657 kortelė
Klausimas
How can configuration enforcement validate a deployed mitigation?
Atsakymas
It compares the realized settings with the approved state and corrects or reports drift.
658 kortelė
Klausimas
How does validating an alert improve alert tuning?
Atsakymas
The analyst can identify which conditions, thresholds, or context caused noise or missed important evidence.
659 kortelė
Klausimas
What data-layer impact can a SQL injection vulnerability create?
Atsakymas
It can let untrusted input alter a database query, exposing or changing data and sometimes executing administrative operations.
660 kortelė
Klausimas
What environmental variables can change vulnerability priority?
Atsakymas
Local exposure, configuration, existing controls, asset importance, and the effect on the organization's actual environment.
661 kortelė
Klausimas
What security role does SELinux provide?
Atsakymas
Mandatory access controls that confine processes according to centrally defined policy.
662 kortelė
Klausimas
Why review governance documents periodically?
Atsakymas
Business, technology, threats, and external obligations change.
663 kortelė
Klausimas
Why evaluate power requirements for a system design?
Atsakymas
Power capacity and redundancy constrain availability and recovery.
664 kortelė
Klausimas
When is IPsec a better tunnel choice than TLS?
Atsakymas
Choose IPsec when policy must protect IP traffic broadly below individual applications—for example, across a site-to-site gateway tunnel. Choose TLS for a specific service connection.
665 kortelė
Klausimas
What is a honeytoken?
Atsakymas
A fake credential or data element that generates a high-confidence alert when used.
666 kortelė
Klausimas
What should embedded-system hardening prioritize?
Atsakymas
Trusted firmware, restricted interfaces, secure defaults, minimal services, and a supported update path.
667 kortelė
Klausimas
Why must sanitization address data remanence?
Atsakymas
Residual data may remain recoverable after ordinary deletion, so the sanitization method must make recovery infeasible for the media and risk.
668 kortelė
Klausimas
Why require rules of engagement for vendor testing?
Atsakymas
Authorized scope, timing, methods, contacts, and stop conditions prevent unsafe or mistaken activity.
669 kortelė
Klausimas
What does a private data classification indicate?
Atsakymas
The information concerns an individual or limited internal audience and should not be exposed publicly.
670 kortelė
Klausimas
What does a tabletop recovery exercise test?
Atsakymas
Participants walk through a scenario and decisions without switching production systems, exposing plan and coordination gaps.
671 kortelė
Klausimas
Why prevent password reuse?
Atsakymas
One compromised password should not unlock other accounts or services.
672 kortelė
Klausimas
Which malicious-activity indicator is unexplained sustained CPU or memory use?
Atsakymas
Abnormal resource consumption, such as unusual CPU, memory, power, storage, or network-bandwidth use.
673 kortelė
Klausimas
What does transport encryption protect?
Atsakymas
It protects data-in-transit confidentiality: captured or intercepted traffic is unreadable without the key. Encryption does not prevent interception or, by itself, provide integrity or authenticate endpoints.
674 kortelė
Klausimas
How can a voice call become an attack vector?
Atsakymas
An attacker can use a live or synthetic voice to impersonate a trusted party and request secrets, money, or unsafe actions.
675 kortelė
Klausimas
What should a digital-forensics report document?
Atsakymas
The question examined, methods, evidence sources, timeline, findings, limitations, and the basis for each conclusion.
676 kortelė
Klausimas
What tradeoff comes with an expansionary risk appetite?
Atsakymas
It accepts more uncertainty and exposure to pursue growth or return, so limits and monitoring must remain explicit.
677 kortelė
Klausimas
What does a known penetration-test environment provide?
Atsakymas
The tester receives substantial internal knowledge or access so the exercise can focus on deeper control and attack-path testing.
678 kortelė
Klausimas
Why evaluate compute requirements before deployment?
Atsakymas
Insufficient resources can cause failure, while excessive resources increase cost and attack surface.
679 kortelė
Klausimas
Why place sensors at network choke points?
Atsakymas
They can observe traffic crossing important trust boundaries.
680 kortelė
Klausimas
What should hybrid or remote-work security training emphasize?
Atsakymas
Trusted networks and devices, physical privacy, secure communication, reporting, data handling, and separation of work from shared environments.
681 kortelė
Klausimas
Why plan an application restart separately from a service restart?
Atsakymas
The application may need its own state handling, user coordination, health checks, and rollback point.
682 kortelė
Klausimas
What is a cryptographic vulnerability?
Atsakymas
A weakness in algorithm choice, key handling, implementation, or protocol use that defeats the intended protection.
683 kortelė
Klausimas
Why report findings by asset owner?
Atsakymas
Owners need clear accountability and a prioritized remediation queue.
684 kortelė
Klausimas
What should guide selection of a secure protocol?
Atsakymas
The protocol must protect the required data flow, authenticate the right endpoints, use supported cryptography, and fit operational constraints.
685 kortelė
Klausimas
How do centralized and decentralized governance structures differ?
Atsakymas
Centralized governance sets decisions from one authority; decentralized governance delegates them and needs strong coordination for consistency.
686 kortelė
Klausimas
How does privacy-aware design limit data retention?
Atsakymas
It records a justified retention period and makes deletion or anonymization part of the normal data lifecycle.
687 kortelė
Klausimas
What does a pressure security sensor detect?
Atsakymas
Force or weight applied to a protected surface, such as a floor mat or fence line.
688 kortelė
Klausimas
What automation costs should a security team plan for?
Atsakymas
Development, licensing, infrastructure, monitoring, maintenance, failure recovery, and the staff needed to own the workflow.
689 kortelė
Klausimas
What should RTOS hardening preserve while reducing attack surface?
Atsakymas
Deterministic timing and safety requirements, with only necessary services, privileges, interfaces, and validated updates enabled.
690 kortelė
Klausimas
What is the goal of disruption-for-chaos activity?
Atsakymas
Create instability or damage itself rather than pursue a clear financial or intelligence return.
691 kortelė
Klausimas
Which indicator can repeated password guessing produce?
Atsakymas
Unexpected account lockout; repeated failed attempts can trigger the account's lockout policy.
692 kortelė
Klausimas
How does removing unnecessary software harden a system?
Atsakymas
It eliminates code, services, dependencies, and privileges that an attacker could otherwise target.
693 kortelė
Klausimas
What does NetFlow provide?
Atsakymas
Metadata summarizing network conversations, such as endpoints, ports, timing, protocol, and byte counts.
694 kortelė
Klausimas
How can a dashboard support an investigation?
Atsakymas
It brings selected current and historical signals together so investigators can spot changes, patterns, and affected scope.
695 kortelė
Klausimas
When should a password be expired?
Atsakymas
When compromise is suspected, policy or risk requires a change, or the credential no longer meets the approved authentication standard.
696 kortelė
Klausimas
Why does cryptographic key length matter?
Atsakymas
It affects the work required to search the key space, although security also depends on the algorithm and implementation.
697 kortelė
Klausimas
How can an unsecure Bluetooth connection become an attack vector?
Atsakymas
Weak pairing, discoverability, or vulnerable services can let a nearby attacker connect, intercept data, or issue commands.
698 kortelė
Klausimas
What is a key risk indicator?
Atsakymas
A metric that signals changing exposure or increasing likelihood of an adverse outcome.
699 kortelė
Klausimas
What should vendor monitoring verify when a contract ends?
Atsakymas
Vendor accounts, credentials, connections, data access, and retained assets are removed or transferred as approved.
700 kortelė
Klausimas
What does a sensitive data classification indicate?
Atsakymas
The information needs safeguards because unauthorized access, change, or loss could cause harm.
701 kortelė
Klausimas
What does software-defined networking separate?
Atsakymas
The control plane that decides traffic behavior from the data plane that forwards traffic.
702 kortelė
Klausimas
Where should a web application firewall be placed?
Atsakymas
In the path of web requests before they reach the protected application.
703 kortelė
Klausimas
What does a simulated recovery exercise test?
Atsakymas
Participants perform realistic response actions in a controlled environment without disrupting production.
704 kortelė
Klausimas
How can a team verify that a detective control is effective?
Atsakymas
Trigger a known test event and confirm that the control records it, alerts the right responder, and supplies useful evidence.
705 kortelė
Klausimas
How should defenders apply a published or documented indicator to telemetry and validate it before escalating?
Atsakymas
Search relevant telemetry for matches, then confirm the indicator's relevance, context, and freshness before escalating.
706 kortelė
Klausimas
What makes a vulnerability cloud-specific?
Atsakymas
It arises from cloud service configuration, shared responsibility, control-plane exposure, tenancy, or provider-specific behavior.
707 kortelė
Klausimas
How can insurance respond to vulnerability risk?
Atsakymas
It may transfer defined financial consequences, but it does not remove the weakness or the organization's duties.
708 kortelė
Klausimas
How does reputation improve web filtering?
Atsakymas
It uses prior observations about a domain, address, certificate, or hosting pattern to identify destinations with elevated risk.
709 kortelė
Klausimas
What does an encryption policy establish?
Atsakymas
Which data and communications require encryption, approved methods, key responsibilities, exceptions, and review duties.
710 kortelė
Klausimas
How does a microwave security sensor detect movement?
Atsakymas
It emits microwave energy and detects changes in the reflected signal caused by motion.
711 kortelė
Klausimas
What should IoT-device hardening change before deployment?
Atsakymas
Default credentials, unnecessary services, insecure communication, unmanaged updates, and unrestricted network access.
712 kortelė
Klausimas
Why track software licenses as assets?
Atsakymas
License ownership, permitted use, updates, and end-of-support status affect compliance and risk.
713 kortelė
Klausimas
What does a password manager improve?
Atsakymas
It can generate and store unique long passwords so users do not memorize or reuse them.
714 kortelė
Klausimas
What makes a ledger open and public?
Atsakymas
Anyone can inspect its recorded entries, while its consensus and integrity controls determine who can add valid entries.
715 kortelė
Klausimas
What should a payment-change request trigger?
Atsakymas
Independent verification through a known channel before any account or payment detail is changed.
716 kortelė
Klausimas
What does preserving digital evidence require?
Atsakymas
Protecting its integrity, context, access history, and availability from collection through final disposition.
717 kortelė
Klausimas
What should a risk report tell decision-makers?
Atsakymas
The risk, uncertainty, business impact, owner, treatment, trend, and decision required.
718 kortelė
Klausimas
What should an external assessment report provide?
Atsakymas
Its scope, criteria, evidence, findings, limitations, conclusions, and responsible follow-up actions.
719 kortelė
Klausimas
What is a centralized design's main resilience risk?
Atsakymas
A central dependency can become a bottleneck or single point of failure.
720 kortelė
Klausimas
What does mutual TLS add to a TLS-protected service connection?
Atsakymas
It adds client authentication, commonly with a client certificate, so the client and server authenticate each other.
721 kortelė
Klausimas
What should recurring security-awareness reporting show?
Atsakymas
Changes in participation, knowledge, behavior, reporting, and incidents, with gaps assigned to owners and follow-up actions.
722 kortelė
Klausimas
Why do legacy applications require extra change planning?
Atsakymas
They may depend on undocumented behavior, unsupported components, or fragile integrations that make failure and rollback more likely.
723 kortelė
Klausimas
How do a data controller and a data processor differ?
Atsakymas
A controller decides why and how personal data is processed. A processor handles that data on the controller’s behalf.
724 kortelė
Klausimas
How can orchestration become a single point of failure?
Atsakymas
Many security workflows may depend on one engine, credential path, or integration hub whose outage stops all of them.
725 kortelė
Klausimas
Why should defenses account for a threat actor's sophistication and capability?
Atsakymas
Those attributes indicate which techniques the actor can sustain and which controls are likely to slow or expose them.
726 kortelė
Klausimas
How does an injection attack make an application execute unintended instructions?
Atsakymas
It sends crafted input that an interpreter treats as code or commands instead of data.
727 kortelė
Klausimas
What does a host-based firewall control?
Atsakymas
Inbound and outbound network traffic for one endpoint according to local rules.
728 kortelė
Klausimas
Why revise alerting after an incident?
Atsakymas
The incident can reveal missing telemetry, logic, thresholds, or response paths that should produce a better future alert.
729 kortelė
Klausimas
Why include security duties in procurement criteria?
Atsakymas
Security is easier to require before selection than to retrofit after dependency and data transfer begin.
730 kortelė
Klausimas
What does a critical data classification indicate?
Atsakymas
The information is essential to vital operations, safety, or mission outcomes and needs the strongest availability and recovery controls.
731 kortelė
Klausimas
What infrastructure capacity must support failover?
Atsakymas
The alternate site, network, power, cooling, and facility resources needed to carry the transferred load.
732 kortelė
Klausimas
Why does shared cloud context matter when evaluating a cloud-specific vulnerability?
Atsakymas
The affected service model and responsibility boundary determine who can observe, patch, configure, or compensate for the weakness.
733 kortelė
Klausimas
How does a remediation exemption differ from an exception?
Atsakymas
Terminology follows the governing policy. A common convention is that an exemption removes a requirement for an approved scope, while an exception permits a time-bounded deviation.
734 kortelė
Klausimas
Why should automated EDR or XDR blocking have an exception and rollback path?
Atsakymas
A false positive can isolate a critical endpoint or stop a legitimate process, so operators need controlled recovery without disabling protection broadly.
735 kortelė
Klausimas
What does a security playbook provide?
Atsakymas
A repeatable set of roles, decisions, and actions for handling a defined operational scenario.
736 kortelė
Klausimas
How does an ultrasonic security sensor detect movement?
Atsakymas
It emits high-frequency sound and detects changes in the returning sound pattern caused by motion.
737 kortelė
Klausimas
What should a managed mobile device require for Bluetooth connections?
Atsakymas
Intentional pairing, non-discoverable operation when unused, trusted peers, current software, and only necessary Bluetooth profiles.
738 kortelė
Klausimas
How do password complexity rules differ from password length?
Atsakymas
Complexity rules require selected character types; length measures total characters. Current policy should prioritize sufficient length and block weak or compromised choices instead of relying on composition alone.
739 kortelė
Klausimas
What makes a certificate third-party trusted?
Atsakymas
A certificate authority outside the subject organization signs it and chains it to a root trusted by relying systems.
740 kortelė
Klausimas
Why is an out-of-band check effective against impersonation?
Atsakymas
It verifies the request through a separate, previously trusted communication path.
741 kortelė
Klausimas
What does a risk exception authorize?
Atsakymas
A documented deviation from a requirement for a defined scope, rationale, controls, owner, review, and expiration.
742 kortelė
Klausimas
What security challenge grows in a decentralized design?
Atsakymas
Consistent policy, inventory, monitoring, and patching become harder.
743 kortelė
Klausimas
How should controls be selected for an unused network path?
Atsakymas
Choose controls that block it by default, expose only approved connectivity, and make exceptions explicit and reviewable.
744 kortelė
Klausimas
How can a buffer-overflow attack affect an application?
Atsakymas
It writes past a buffer boundary to corrupt memory, which can crash the application or redirect execution.
744 kortelės
CompTIA Security+ SY0-701 Flashcards: Complete Objective Review
Atsidarys Nibomo ir galėsite pradėti mokytis.